NixOS/mobile-nixos
1
1
Fork 0
mirror of https://github.com/NixOS/mobile-nixos.git synced 2024-09-17 14:57:22 +03:00
Code Issues Projects Releases Wiki Activity

examples/testing: Fix the qemu-cryptsetup build

Browse Source
This commit is contained in:
Faye Chun 2024-07-04 18:53:07 -04:00
parent 655c8830d5
commit 5c6a38bf97
No known key found for this signature in database
GPG Key ID: 5A71B0102FD73FC0
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
examples/testing/qemu-cryptsetup/configuration.nix
View File

@ -9,7 +9,7 @@ let
# We are re-using the raw filesystem from the hello system.
rootfsExt4 = (
import ../../hello { device = config.mobile.device.name; }
).build.rootfs;
).config.mobile.generatedFilesystems.rootfs;
# This is not a facility from the disk images builder because **it is really
# insecure to use**.
@ -18,8 +18,9 @@ let
encryptedRootfs = pkgs.vmTools.runInLinuxVM (
pkgs.runCommand "encrypted-rootfs" {
buildInputs = [ pkgs.cryptsetup ];
passthru = {
passthru = rec {
filename = "encrypted.img";
location = "/${filename}";
filesystemType = "LUKS";
};
} ''
@ -36,7 +37,7 @@ let
# Catting both to ensure it's writable, and to add some slack space at
# the end
cat ${rootfsExt4}/${rootfsExt4.label}.img tmp.img > encrypted.img
cat ${rootfsExt4.imagePath} tmp.img > encrypted.img
rm tmp.img
echo ${builtins.toJSON passphrase} | cryptsetup \
@ -71,6 +72,9 @@ in
# Instead of the (mkDefault) rootfs, provide our raw encrypted rootfs.
mobile.generatedFilesystems.rootfs = {
raw = encryptedRootfs;
inherit (rootfsExt4) filesystem label;
inherit (encryptedRootfs) location;
output = lib.mkForce encryptedRootfs;
};
}