me
/
guix
Archived
1
0
Fork 0

installer: Make LUKS2 the default format for encrypted devices

* gnu/installer/parted.scm (luks-format-and-open): Change it.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
master
Josselin Poiret 2021-11-15 20:53:41 +00:00 committed by Ludovic Courtès
parent 4c5f970e8a
commit a82e9f45fd
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
1 changed files with 3 additions and 2 deletions

View File

@ -1169,8 +1169,9 @@ USER-PARTITION if it is encrypted, or the plain file-name otherwise."
(lambda (key-file)
(syslog "formatting and opening LUKS entry ~s at ~s~%"
label file-name)
(system* "cryptsetup" "-q" "luksFormat" file-name key-file)
(system* "cryptsetup" "open" "--type" "luks"
(system* "cryptsetup" "-q" "luksFormat" "--type" "luks2"
"--pbkdf" "pbkdf2" file-name key-file)
(system* "cryptsetup" "open"
"--key-file" key-file file-name label)))))
(define (luks-close user-partition)