History

Jake Hillion cde6bdd498 All checks were successful flake / flake (push) Successful in 1m13s Details tywin: enable clevis/tang for boot		2024-06-10 22:34:28 +01:00
..
clevis_config.json	tywin: enable clevis/tang for boot	2024-06-10 22:34:28 +01:00
default.nix	tywin: enable clevis/tang for boot	2024-06-10 22:34:28 +01:00
hardware-configuration.nix	tywin: encrypt root disk	2024-06-09 23:14:44 +01:00
README.md	tywin: enable clevis/tang for boot	2024-06-10 22:34:28 +01:00
system	tywin.storage: add host	2023-05-20 17:28:08 +01:00

README.md

tywin.storage.ts.hillion.co.uk

Additional installation step for Clevis/Tang:

$ echo -n $DISK_ENCRYPTION_PASSWORD | clevis encrypt sss "$(cat /etc/nixos/hosts/tywin.storage.ts.hillion.co.uk/clevis_config.json)" >/mnt/disk_encryption.jwe
$ sudo chown root:root /mnt/disk_encryption.jwe
$ sudo chmod 0400 /mnt/disk_encryption.jwe