nixos.luksroot: fix assertion message to name correct option

This commit is contained in:
Jade Lovelace 2024-03-05 13:38:38 -08:00
parent e09d2ff9da
commit a72afcbc48

View file

@ -982,8 +982,10 @@ in
}
{ assertion = config.boot.initrd.systemd.enable -> !luks.fido2Support;
message = ''
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.devices.<name>.fido2`.
Use systemd-cryptenroll(1) to configure FIDO2 support.
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.fido2Support`.
Use systemd-cryptenroll(1) to configure FIDO2 support, and set
`boot.initrd.luks.devices.''${DEVICE}.crypttabExtraOpts` as appropriate per crypttab(5)
(e.g. `fido2-device=auto`).
'';
}
# TODO