Merge pull request #293591 from lf-/jade/fix-luksroot-assert

nixos.luksroot: fix assertion message to name correct option
This commit is contained in:
Will Fancher 2024-03-18 17:46:11 -04:00 committed by GitHub
commit 57f69255d7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -982,8 +982,10 @@ in
}
{ assertion = config.boot.initrd.systemd.enable -> !luks.fido2Support;
message = ''
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.devices.<name>.fido2`.
Use systemd-cryptenroll(1) to configure FIDO2 support.
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.fido2Support`.
Use systemd-cryptenroll(1) to configure FIDO2 support, and set
`boot.initrd.luks.devices.''${DEVICE}.crypttabExtraOpts` as appropriate per crypttab(5)
(e.g. `fido2-device=auto`).
'';
}
# TODO