cryptsetup: enable kernel crypto api support again

This is needed for tcrypt and the benchmark subcommand. If enabled,
it is also used to unlock LUKS2 volumes and therefore the kernel modules
providing this feature need to be available in our initrd.

Fixes #42163. #54019.
This commit is contained in:
Franz Pletz 2019-06-07 22:15:35 +02:00
parent 2ef3b5200a
commit 2587df7f02
No known key found for this signature in database
GPG key ID: 846FDED7792617B4
2 changed files with 1 additions and 1 deletions

View file

@ -438,6 +438,7 @@ in
default =
[ "aes" "aes_generic" "blowfish" "twofish"
"serpent" "cbc" "xts" "lrw" "sha1" "sha256" "sha512"
"af_alg" "algif_skcipher"
(if pkgs.stdenv.hostPlatform.system == "x86_64-linux" then "aes_x86_64" else "aes_i586")
];

View file

@ -32,7 +32,6 @@ stdenv.mkDerivation rec {
NIX_LDFLAGS = "-lgcc_s";
configureFlags = [
"--disable-kernel_crypto"
"--enable-cryptsetup-reencrypt"
"--with-crypto_backend=openssl"
] ++ stdenv.lib.optional enablePython "--enable-python";