initrd: make keyfile optional

2021-10-23 23:29:09 +02:00 · 2021-10-23 23:29:09 +02:00 · 27aab3e540
parent 0bfe4a135e
commit 27aab3e540
1 changed files with 1 additions and 1 deletions
--- a/modules/x-os/boot.nix
+++ b/modules/x-os/boot.nix
@ -23,7 +23,7 @@ with lib; {

    # Use Keyfile to unlock the root partition to avoid keying in twice.
    # Allow fstrim to work on it.
-    boot.initrd = {
+    boot.initrd = mkIf cfg.enableBootLoader {
      secrets = { "/keyfile.bin" = cfg.keyfile; };
      luks.devices."cryptroot" = {
        keyFile = "/keyfile.bin";