fix: exhaustive logical audit of installer, live-iso and system configurations

2026-04-13 19:26:47 +01:00
parent 2d587d40ff
commit cabc668c77
5 changed files with 59 additions and 8 deletions
--- a/installer/disko-golden.nix
+++ b/installer/disko-golden.nix
@@ -38,9 +38,10 @@
              content = {
                type = "luks";
                name = "crypted";
-                # Password will be provided interactively or via stdin
+                # Password will be provided via /tmp/secret.key
                settings = {
                  allowDiscards = true;  # Enable TRIM for SSDs
+                  passwordFile = "/tmp/secret.key";
                };
                content = {
                  type = "btrfs";