nixos/luksroot

NixOS module · nixos/modules/system/boot/luksroot.nix

Health

NixOS test

no finished build of nixos/trunk-combined/nixos.tests.luksroot.x86_64-linux

Maintainers

none

Area

nixos/modules/system/boot/

Pull requests 10

nixos: Drop scripted stage 1

#573038 by ElvishJerricco · opened 4d ago · checks pass

various: lib usage improvements draft

#445357 by h7x4 · opened 12mo ago · checks pass

nixos/luksroot: Implement keyFileTimeout (for non-systemd initrd)

#369628 by CyberShadow · opened 21mo ago · checks pass

nixos/luksroot: fix passphrase retry with YubiKey and reusePassphrases

#306351 by tux19 · opened 2y ago

luksroot: allow extra activation commands for complex storage layering cases

#281895 by deepfire · opened 2y ago

luksroot: add a boot.initrd.luks.devices.DEV.cryptsetupOpenExtraArgs option passthrough

#281880 by deepfire · opened 2y ago

WIP: nixos/luks: Allow for many key files draft

#266169 by jonringer · opened 2y ago

nixos: boot: luks: add option fido2NeedsPIN

#213104 by hexagonal-sun · opened 3y ago

nixos/luksboot fix yubikey password retries

#201908 by VAWVAW · opened 3y ago

nixos/luksroot: Add option to save passphrases. draft

#64374 by ambrop72 · opened 7y ago

Closed or merged in the synced window 3

nixos/luksroot: add tpm2 device option

#419703 by 1nv0k32 · closed 3d ago

nixos/luksroot: add timeout option for devices

#359882 by amozeo · merged 2w ago

nixos/luksroot: add fido2luks options

#263631 by sivizius · closed 2d ago

Issues 12

luksroot.nix: `do_open_passphrase` silently truncates binary key files at null bytes

#524320 by 5UP4F15H · opened 4mo ago · 0 comments

nixos/luksroot: Backup Yubikey invalidated after first boot 6.topic: nixos 2.status: stale

#499289 by nullcopy · opened 7mo ago · 1 comments

fido2 luks implementation does not work with yubikey PIN 2.status: stale

#280575 by notaLonelyDay · opened 2y ago · 0 comments

luksroot: Use keyctl over ramfs 2.status: stale

#273591 by stackcoder · opened 2y ago · 9 comments

nixos/luksboot: yubikey passphrase retries don't work with passphrase reuse 2.status: stale

#249511 by VAWVAW · opened 3y ago · 1 comments

Dangerous race conditions and non-atomic procedures in luksroot.nix HMAC-SHA1 procedure leads to data loss 6.topic: nixos 2.status: stale

#210329 by MatthewCroughan · opened 3y ago · 8 comments

(luksroot.nix) Add an option to request a pin when unlocking FIDO2 authenticator 6.topic: nixos 2.status: stale

#141824 by smkuehnhold · opened 5y ago · 8 comments

LUKS authentication with Yubikey FDE creates a broken key for next boot 6.topic: nixos 2.status: stale

#141786 by seam345 · opened 5y ago · 2 comments

(luksroot.nix) Provide a way to override the passphrase prompt 6.topic: nixos 2.status: stale

#132669 by notfed · opened 5y ago · 8 comments

assertion (name' == name) failed at ... luksroot.nix:143:186 6.topic: nixos 2.status: stale

#113337 by ergose · opened 5y ago · 4 comments

Failed to authenticate with gpg on ssh session with initrd gpgcard option activated 6.topic: nixos 2.status: stale

#106563 by reyman · opened 5y ago · 10 comments

nixos/modules/system/boot/luksroot.nix: Should I remove preLVM ? 6.topic: nixos 2.status: stale

#98723 by hugolgst · opened 6y ago · 7 comments