diff --git a/hosts/12kingdoms-rakushun/disko-fs.nix b/hosts/12kingdoms-rakushun/disko-fs.nix index 07f4c1ab..df5bdbb4 100644 --- a/hosts/12kingdoms-rakushun/disko-fs.nix +++ b/hosts/12kingdoms-rakushun/disko-fs.nix @@ -43,7 +43,8 @@ name = "encrypted"; settings = { keyFile = "/dev/disk/by-label/OPI5P_DSC"; # The keyfile is stored on a USB stick - # The maximum size of the keyfile is 8192 bytes + # The maximum size of the keyfile is 8192 KiB + # type `cryptsetup --help` to see the compiled-in key and passphrase maximum sizes keyFileSize = 512 * 64; # match the `bs * count` of the `dd` command keyFileOffset = 512 * 128; # match the `bs * skip` of the `dd` command fallbackToPassword = true; diff --git a/hosts/12kingdoms-suzu/disko-fs.nix b/hosts/12kingdoms-suzu/disko-fs.nix index fafef7dc..703bba52 100644 --- a/hosts/12kingdoms-suzu/disko-fs.nix +++ b/hosts/12kingdoms-suzu/disko-fs.nix @@ -43,7 +43,8 @@ name = "encrypted"; settings = { keyFile = "/dev/disk/by-label/OPI5_DSC"; # The keyfile is stored on a USB stick - # The maximum size of the keyfile is 8192 bytes + # The maximum size of the keyfile is 8192 KiB + # type `cryptsetup --help` to see the compiled-in key and passphrase maximum sizes keyFileSize = 512 * 64; # match the `bs * count` of the `dd` command keyFileOffset = 512 * 128; # match the `bs * skip` of the `dd` command fallbackToPassword = true; diff --git a/hosts/k8s/disko-config/kubevirt-disko-fs.nix b/hosts/k8s/disko-config/kubevirt-disko-fs.nix index 4bfe6d56..e3d8a707 100644 --- a/hosts/k8s/disko-config/kubevirt-disko-fs.nix +++ b/hosts/k8s/disko-config/kubevirt-disko-fs.nix @@ -49,7 +49,8 @@ name = "encrypted"; settings = { keyFile = "/dev/disk/by-label/NIXOS_DSC"; # The keyfile is stored on a USB stick - # The maximum size of the keyfile is 8192 bytes + # The maximum size of the keyfile is 8192 KiB + # type `cryptsetup --help` to see the compiled-in key and passphrase maximum sizes keyFileSize = 512 * 64; # match the `bs * count` of the `dd` command keyFileOffset = 512 * 128; # match the `bs * skip` of the `dd` command fallbackToPassword = true;