...

1 files changed, 9 insertions, 2 deletions

diff --git a/system-profiles/initrd-all-crypto-modules.nix b/system-profiles/initrd-all-crypto-modules.nix
index 3b3b24fc..45cd4b74 100644
--- a/system-profiles/initrd-all-crypto-modules.nix
+++ b/system-profiles/initrd-all-crypto-modules.nix
@@ -1,4 +1,4 @@
-{ pkgs, config, ...}:
+{ lib, pkgs, config, ...}:
 let
   moduleList = builtins.fromJSON (builtins.readFile (pkgs.runCommandCC "crypto-modules" { buildInputs = with pkgs; [ jq ]; } ''
     echo "[]" > $out
@@ -12,6 +12,13 @@ let
   ''));
 in {
   boot.initrd.luks.cryptoModules = moduleList ++ [
-    "encrypted_keys" "rng"
+    "encrypted_keys" "trusted" "rng"
+  ];
+  boot.kernelPatches = [
+    {
+      name = "encrypted_key";
+      patch = null;
+      extraStructuredConfig.ENCRYPTED_KEYS = lib.kernel.yes;
+    }
   ];
 }