From 79004a0077ad0d584859e39bf7ec881e4ae67999 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Fri, 13 Jan 2023 11:22:51 +0100
Subject: initrd ssh: force command cryptsetup-askpass
---
system-profiles/initrd-ssh/default.nix | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/system-profiles/initrd-ssh/default.nix b/system-profiles/initrd-ssh/default.nix
index dca0f125..5176234f 100644
--- a/system-profiles/initrd-ssh/default.nix
+++ b/system-profiles/initrd-ssh/default.nix
@@ -13,6 +13,10 @@ with lib;
enable = true;
hostKeys = [ "/etc/ssh/ssh_host_ed25519_key" "/etc/ssh/ssh_host_rsa_key" ];
authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys ++ map (kF: builtins.readFile kF) config.users.users.root.openssh.authorizedKeys.keyFiles;
+
+ extraConfig = ''
+ ForceCommand cryptsetup-askpass
+ '';
};
};
--
cgit v1.2.3