encrypted devices: add label set assertion (#29651)

2017-09-23 20:02:16 +02:00 · 2017-09-23 20:02:16 +02:00 · eca23233b2
commit eca23233b2
parent 8d001911db
1 changed files with 7 additions and 0 deletions
--- a/nixos/modules/tasks/encrypted-devices.nix
+++ b/nixos/modules/tasks/encrypted-devices.nix
@ -56,6 +56,13 @@ in
  };

  config = mkIf anyEncrypted {
+    assertions = map (dev: {
+      assertion = dev.label != null;
+      message = ''
+        The filesystem for ${dev.mountPoint} has encrypted.enable set to true, but no encrypted.label set
+      '';
+    }) encDevs;
+
    boot.initrd = {
      luks = {
        devices =