From df17630c7e18f846370e2595472513f1b52bf99c Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Thu, 12 Sep 2024 19:56:53 +0200
Subject: ...

---
 system-profiles/initrd-all-crypto-modules.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

(limited to 'system-profiles/initrd-all-crypto-modules.nix')

diff --git a/system-profiles/initrd-all-crypto-modules.nix b/system-profiles/initrd-all-crypto-modules.nix
index 3b3b24fc..45cd4b74 100644
--- a/system-profiles/initrd-all-crypto-modules.nix
+++ b/system-profiles/initrd-all-crypto-modules.nix
@@ -1,4 +1,4 @@
-{ pkgs, config, ...}:
+{ lib, pkgs, config, ...}:
 let
   moduleList = builtins.fromJSON (builtins.readFile (pkgs.runCommandCC "crypto-modules" { buildInputs = with pkgs; [ jq ]; } ''
     echo "[]" > $out
@@ -12,6 +12,13 @@ let
   ''));
 in {
   boot.initrd.luks.cryptoModules = moduleList ++ [
-    "encrypted_keys" "rng"
+    "encrypted_keys" "trusted" "rng"
+  ];
+  boot.kernelPatches = [
+    {
+      name = "encrypted_key";
+      patch = null;
+      extraStructuredConfig.ENCRYPTED_KEYS = lib.kernel.yes;
+    }
   ];
 }
-- 
cgit v1.2.3