prescientmoon/satellite
1
Fork 0
Code Activity

Attempt to use nixos filesystems to mount usb

Browse source
This commit is contained in:
Matei Adriel 2024-01-18 01:47:25 +01:00
parent 638a81e61a
commit d9b438536f
No known key found for this signature in database
2 changed files with 21 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
hosts/nixos/lapetus/filesystems/default.nix
View file

@ -8,5 +8,8 @@
# Mark a bunch of paths as needed for boot
fileSystems = lib.attrsets.genAttrs
[ "/" "/nix" "/persist/data" "/persist/state" "/persist/local/cache" "/boot" ]
(_: { neededForBoot = true; });
(_: {
neededForBoot = true;
depends = [ "/hermes" ];
});
}

28
hosts/nixos/lapetus/filesystems/zfs.nix
View file

@ -8,18 +8,24 @@ in
boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
boot.kernelParams = [ "nohibernate" ];
# {{{ Mount usb for zfs secrets
boot.initrd.systemd.mounts = [{
where = "/hermes";
what = "/dev/sdb";
fileSystems."/hermes" = {
neededForBoot = true;
device = "/dev/disk/by-uuid/7FE7-CA68";
fsType = "exfat";
};
# The usb contains sensitive data that should only be readable to root
# mountConfig.DirectoryMode = "0750";
wantedBy = [ "zfs-import.target" ];
before = [ "zfs-import.target" ];
}];
# }}}
# # {{{ Mount usb for zfs secrets
# boot.initrd.systemd.mounts = [{
# where = "/hermes";
# what = "/dev/sdb";
#
# # The usb contains sensitive data that should only be readable to root
# # mountConfig.DirectoryMode = "0750";
#
# wantedBy = [ "zfs-import.target" ];
# before = [ "zfs-import.target" ];
# }];
# # }}}
boot.initrd.systemd.services = {
# # {{{ Rollback