Installation on macOS Catalina

danieldk · June 24, 2020, 12:44pm

See this comment for the motivation:

Comment by LnL7 - Don't stop user from installing the nix store on an unencrypted volume

NixOS:master ← digitallyinduced:darwin-installer-improvements

I don't understand the question, as stated above and in the manual if filevault …is enabled for the boot volume and no hardware encryption is available some kind of encryption also needs to be setup for the store volume. Just doing it anyway and relying on the user noticing that their installation is in a bad state, while convenient, isn't a good default. Anybody that has enabled filevault on their machine should also care about this. | filevault | hardware encryption | installer | | - | - | - | | no | yes | unencrypted | | no | no | unencrypted | | yes | yes | unencrypted but still protected by safe boot, warn but continue | | yes | no | requires encryption, fail |