initrd ssh: force command cryptsetup-askpass

1 files changed, 4 insertions, 0 deletions

diff --git a/system-profiles/initrd-ssh/default.nix b/system-profiles/initrd-ssh/default.nix
index dca0f125..5176234f 100644
--- a/system-profiles/initrd-ssh/default.nix
+++ b/system-profiles/initrd-ssh/default.nix
@@ -13,6 +13,10 @@ with lib;
           enable = true;
           hostKeys = [ "/etc/ssh/ssh_host_ed25519_key" "/etc/ssh/ssh_host_rsa_key" ];
           authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys ++ map (kF: builtins.readFile kF) config.users.users.root.openssh.authorizedKeys.keyFiles;
+
+          extraConfig = ''
+            ForceCommand cryptsetup-askpass
+          '';
         };
       };