summaryrefslogtreecommitdiffstats
path: root/example/luks-lvm.nix
blob: 22c029e6f7ad7d80cf76531a1f4ac76c920a5ebd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
{
  type = "devices";
  content = {
    vdb = {
      type = "table";
      format = "gpt";
      partitions = [
        {
          type = "partition";
          part-type = "ESP";
          start = "1MiB";
          end = "100MiB";
          fs-type = "FAT32";
          bootable = true;
          content = {
            type = "filesystem";
            format = "vfat";
            mountpoint = "/boot";
            options = [
              "defaults"
            ];
          };
        }
        {
          type = "partition";
          part-type = "primary";
          start = "100MiB";
          end = "100%";
          content = {
            type = "luks";
            algo = "aes-xts...";
            name = "crypted";
            keyfile = "/tmp/secret.key";
            extraArgs = [
              "--hash sha512"
              "--iter-time 5000"
            ];
            content = {
              type = "lvm_pv";
              vg = "pool";
            };
          };
        }
      ];
    };
    pool = {
      type = "lvm_vg";
        lvs = {
          root = {
            type = "lvm_lv";
            size = "100M";
            mountpoint = "/";
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/";
              options = [
                "defaults"
              ];
            };
          };
          home = {
            type = "lvm_lv";
            size = "10M";
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/home";
            };
          };
          raw = {
            type = "lvm_lv";
            size = "10M";
            content = {
              type = "noop";
            };
          };
        };
    };
  };
}