From 5abbd6328442e4d46fff2d9b94c3ac7a55a3964d Mon Sep 17 00:00:00 2001 From: Ryan Yin Date: Wed, 24 Apr 2024 11:22:07 +0800 Subject: [PATCH] docs: fix the maxium keyfile size of luks --- hosts/12kingdoms-rakushun/disko-fs.nix | 3 ++- hosts/12kingdoms-suzu/disko-fs.nix | 3 ++- hosts/k8s/disko-config/kubevirt-disko-fs.nix | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/hosts/12kingdoms-rakushun/disko-fs.nix b/hosts/12kingdoms-rakushun/disko-fs.nix index 07f4c1ab..df5bdbb4 100644 --- a/hosts/12kingdoms-rakushun/disko-fs.nix +++ b/hosts/12kingdoms-rakushun/disko-fs.nix @@ -43,7 +43,8 @@ name = "encrypted"; settings = { keyFile = "/dev/disk/by-label/OPI5P_DSC"; # The keyfile is stored on a USB stick - # The maximum size of the keyfile is 8192 bytes + # The maximum size of the keyfile is 8192 KiB + # type `cryptsetup --help` to see the compiled-in key and passphrase maximum sizes keyFileSize = 512 * 64; # match the `bs * count` of the `dd` command keyFileOffset = 512 * 128; # match the `bs * skip` of the `dd` command fallbackToPassword = true; diff --git a/hosts/12kingdoms-suzu/disko-fs.nix b/hosts/12kingdoms-suzu/disko-fs.nix index fafef7dc..703bba52 100644 --- a/hosts/12kingdoms-suzu/disko-fs.nix +++ b/hosts/12kingdoms-suzu/disko-fs.nix @@ -43,7 +43,8 @@ name = "encrypted"; settings = { keyFile = "/dev/disk/by-label/OPI5_DSC"; # The keyfile is stored on a USB stick - # The maximum size of the keyfile is 8192 bytes + # The maximum size of the keyfile is 8192 KiB + # type `cryptsetup --help` to see the compiled-in key and passphrase maximum sizes keyFileSize = 512 * 64; # match the `bs * count` of the `dd` command keyFileOffset = 512 * 128; # match the `bs * skip` of the `dd` command fallbackToPassword = true; diff --git a/hosts/k8s/disko-config/kubevirt-disko-fs.nix b/hosts/k8s/disko-config/kubevirt-disko-fs.nix index 4bfe6d56..e3d8a707 100644 --- a/hosts/k8s/disko-config/kubevirt-disko-fs.nix +++ b/hosts/k8s/disko-config/kubevirt-disko-fs.nix @@ -49,7 +49,8 @@ name = "encrypted"; settings = { keyFile = "/dev/disk/by-label/NIXOS_DSC"; # The keyfile is stored on a USB stick - # The maximum size of the keyfile is 8192 bytes + # The maximum size of the keyfile is 8192 KiB + # type `cryptsetup --help` to see the compiled-in key and passphrase maximum sizes keyFileSize = 512 * 64; # match the `bs * count` of the `dd` command keyFileOffset = 512 * 128; # match the `bs * skip` of the `dd` command fallbackToPassword = true;