kyle/imladris
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix orion: remove bogus "crypted" LUKS device reference

Browse Source 
The FIDO2 crypttab options are already on the correct UUID-named device
in hardware-configuration.nix; the "crypted" name only applies to
disko-provisioned hosts (rift).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kyle Isom
2026-04-03 01:00:19 -07:00
parent 5fd00af73c
commit 755450e72e
1 changed files with 0 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hw/orion/default.nix
View File

@@ -10,12 +10,6 @@
];
config = {
# FIDO2 LUKS unlock (matches vade setup)
boot.initrd.luks.devices."crypted".crypttabExtraOpts = [
"fido2-device=auto"
"token-timeout=10"
];
# Allow rootless containers (Podman) to bind port 53 for CoreDNS (MCNS precursor).
boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;