added FDE for Ratchet

This commit is contained in:
yaroslav
2026-05-08 01:23:27 +03:00
parent e0c7e0aa95
commit cc5f1561d3
2 changed files with 13 additions and 2 deletions
+12 -2
View File
@@ -14,18 +14,28 @@
boot.extraModulePackages = [ ];
boot.extraModprobeConfig = "options kvm_amd nested=1";
boot.initrd.clevis = {
enable = true;
devices."luks-zroot".secretFile = ../../secrets/Ratchet/main.jwe;
devices."luks-swap".secretFile = ../../secrets/Ratchet/main.jwe;
};
boot.initrd.luks.devices = {
luks-zroot.device = "/dev/nvme0n1p2";
luks-swap.device = "/dev/nvme0n1p3";
};
fileSystems."/" =
{ device = "none";
fsType = "tmpfs";
options = ["defaults" "size=1G" "mode=755"];
};
fileSystems."/nix" =
{ device = "ratchet-zfs/root/nix";
{ device = "ratchet-zroot/system/nix";
fsType = "zfs";
};
fileSystems."/home" =
{ device = "ratchet-zfs/root/home";
{ device = "ratchet-zroot/system/home";
fsType = "zfs";
};