Disk Encryption on NixOS servers: How & when to unlock?

Mic92 · July 23, 2020, 1:21pm

I have a setup for zfs encryption as well: https://github.com/Mic92/dotfiles/blob/abb50db1fb0f396a1db05fd85326b08aca044ea7/nixos/eve/modules/network.nix#L99

I have some code to do irc notifications in bash. However I have not integrated this into initrd:

github.com

Mic92/dotfiles/blob/abb50db1fb0f396a1db05fd85326b08aca044ea7/nixos/images/irc-announce/default.nix

{ stdenv
, writeScriptBin
, coreutils
, gawk
, gnused
, netcat
, nettools
}:

writeScriptBin "irc-announce" ''
  #!${stdenv.shell}
  set -euf

  export PATH=${stdenv.lib.makeSearchPath "bin" ([
    coreutils
    gawk
    gnused
    netcat
    nettools
  ])}

This file has been truncated. show original