disko icon indicating copy to clipboard operation
disko copied to clipboard

Published 20 hours ago • verified publisher icon nix-community

Why is `keyFile` deprecated?

Open StillerHarpo opened this issue 2 years ago • 3 comments

I want to generate a encrypted disk with nixos-anywhere. Therefore I use this command:

nixos-anywhere \
  --disk-encryption-keys /tmp/secret.key <(echo -n $(pass nixosRpi4Encryption)) \
 ...

With keyFile = "/tmp/secret.key"; it works. But with settings.keyFile=/tmp/secret.key luks fails on startup, because it want's to unlock with /tmp/secret.key which isn't available

StillerHarpo avatar Aug 13 '23 07:08 StillerHarpo

Ah yeah that's indeed right. We should probably rename keyFile to passwordFile or installKeyFile to make this clear and dedeprecate it :)

Lassulus avatar Aug 13 '23 07:08 Lassulus

PR would be appreciated since I'm quite busy on cccamp right now

Lassulus avatar Aug 13 '23 13:08 Lassulus

Done https://github.com/nix-community/disko/pull/323

StillerHarpo avatar Aug 13 '23 17:08 StillerHarpo

With the PR merged, can this issue be closed?

dehnert avatar Sep 26 '24 02:09 dehnert

Yeah I'd say so. Thank you for bringing it up!

iFreilicht avatar Sep 26 '24 07:09 iFreilicht