nix-community/disko
1
1
Fork 0
mirror of https://github.com/nix-community/disko.git synced 2024-09-17 09:37:17 +03:00
Code Issues Packages Projects Releases Wiki Activity

luks: don't leak secret in debug logs

Browse Source
This commit is contained in:
Jörg Thalheim 2023-09-25 16:51:25 +02:00 committed by mergify[bot]
parent 0b178c0554
commit b18f43a9c2
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/types/luks.nix
View File

@ -4,7 +4,8 @@ let
if lib.hasAttr "keyFile" config.settings
then config.settings.keyFile
else if config.passwordFile != null
then ''<(echo -n "$(cat ${config.passwordFile})")''
# do not print the password to the console
then ''<(set +x; echo -n "$(cat ${config.passwordFile})"; set -x)''
else if config.keyFile != null
then
lib.warn