mobile-nixos/modules/luks.nix

{ config, lib, pkgs, ... }:

let
  inherit (config.boot.initrd) luks;
in

lib.mkIf (luks.devices != {} || luks.forceLuksSupportInInitrd) {
  mobile.boot.stage-1 = {
    bootConfig = {
      luksDevices = luks.devices;
    };
    kernel = {
      modules = [
        "dm_mod" "dm_crypt" "cryptd" "input_leds"
      ] ++ luks.cryptoModules
      ;
    };

    extraUtils = [
      { package = pkgs.cryptsetup; }
      # dmsetup is required for device mapper stuff to work in stage-1.
      { package = lib.getBin pkgs.lvm2; binaries = [
        "lvm" "dmsetup"
      ];}
    ];
  };
}