From 79004a0077ad0d584859e39bf7ec881e4ae67999 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Fri, 13 Jan 2023 11:22:51 +0100
Subject: initrd ssh: force command cryptsetup-askpass

---
 system-profiles/initrd-ssh/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'system-profiles/initrd-ssh')

diff --git a/system-profiles/initrd-ssh/default.nix b/system-profiles/initrd-ssh/default.nix
index dca0f125..5176234f 100644
--- a/system-profiles/initrd-ssh/default.nix
+++ b/system-profiles/initrd-ssh/default.nix
@@ -13,6 +13,10 @@ with lib;
           enable = true;
           hostKeys = [ "/etc/ssh/ssh_host_ed25519_key" "/etc/ssh/ssh_host_rsa_key" ];
           authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys ++ map (kF: builtins.readFile kF) config.users.users.root.openssh.authorizedKeys.keyFiles;
+
+          extraConfig = ''
+            ForceCommand cryptsetup-askpass
+          '';
         };
       };
 
-- 
cgit v1.2.3