diff options
author | Franz Pletz <fpletz@fnordicwalking.de> | 2019-06-12 05:05:38 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-06-12 05:05:38 +0000 |
commit | 9b2ee2c0573db815572dfa5a076bf73aa77edf56 (patch) | |
tree | 0d0393bd0357d28d145f6f1b068dab7db85392ab | |
parent | e4612862d20ca0d44421f03cae672bcfdc39f218 (diff) | |
parent | c51786bd5dab8156956852342594a1d43a6985da (diff) |
Merge pull request #62838 from mayflower/fix/cryptsetup-kernel-crypto
cryptsetup: enable kernel crypto api support again
-rw-r--r-- | nixos/modules/system/boot/luksroot.nix | 1 | ||||
-rw-r--r-- | nixos/tests/installer.nix | 2 | ||||
-rw-r--r-- | pkgs/os-specific/linux/cryptsetup/default.nix | 1 |
3 files changed, 2 insertions, 2 deletions
diff --git a/nixos/modules/system/boot/luksroot.nix b/nixos/modules/system/boot/luksroot.nix index 9dcb683eff43..b5c8d5241a3d 100644 --- a/nixos/modules/system/boot/luksroot.nix +++ b/nixos/modules/system/boot/luksroot.nix @@ -438,6 +438,7 @@ in default = [ "aes" "aes_generic" "blowfish" "twofish" "serpent" "cbc" "xts" "lrw" "sha1" "sha256" "sha512" + "af_alg" "algif_skcipher" (if pkgs.stdenv.hostPlatform.system == "x86_64-linux" then "aes_x86_64" else "aes_i586") ]; diff --git a/nixos/tests/installer.nix b/nixos/tests/installer.nix index 5e363f5d09e9..07659b60b3b8 100644 --- a/nixos/tests/installer.nix +++ b/nixos/tests/installer.nix @@ -273,7 +273,7 @@ let }; }; - makeLuksRootTest = name: luksFormatOpts: makeInstallerTest "luksroot-format2" + makeLuksRootTest = name: luksFormatOpts: makeInstallerTest name { createPartitions = '' $machine->succeed( "flock /dev/vda parted --script /dev/vda -- mklabel msdos" diff --git a/pkgs/os-specific/linux/cryptsetup/default.nix b/pkgs/os-specific/linux/cryptsetup/default.nix index fac62597013c..ebd09759be6e 100644 --- a/pkgs/os-specific/linux/cryptsetup/default.nix +++ b/pkgs/os-specific/linux/cryptsetup/default.nix @@ -32,7 +32,6 @@ stdenv.mkDerivation rec { NIX_LDFLAGS = "-lgcc_s"; configureFlags = [ - "--disable-kernel_crypto" "--enable-cryptsetup-reencrypt" "--with-crypto_backend=openssl" ] ++ stdenv.lib.optional enablePython "--enable-python"; |