Page history

Klinger

The easiest way is to use the graphical installer and choose „encrypt“ while doing the installation.

Klinger

no edit summary

Mic92

fixing small issue in boot config, canTouchEfiVariables is under efi

imported>Onny

Add note about Bcachefs

imported>Ulinja

add section on unlocking secondary drives

imported>Ulinja

move "LVM on LUKS" to relevant section

imported>Ulinja

correct misleading heading, remove unnecessary config options, improve clarity

imported>Thibaultmol

I think 'partition' was meant here instead of 'disk'

imported>DVcWmsbFziLBuYvvtHcy

use proper highlighting syntax, remove outdated nix syntax warning, random instead urandom

imported>ShenZhouHong

Added further reading link with a guide on FDE using detached LUKS header and separate boot partition

imported>SuperSandro2000

no edit summary

imported>Yuu

no edit summary

imported>Ratorx

no edit summary

imported>Ratorx

Add required kernel module to find the USB device during stage 1

imported>Chexier

Update boot.initrd.luks.devices configuration

imported>MrVanDalo

no edit summary

imported>Kasimon

Update luks config syntax for nixos 20.04

imported>Mic92

fix cases...

imported>J4m3s-s

Add full disk encryption (with encrypted kernel / initrd) with GRUB.

imported>Ryanorendorff

no edit summary

imported>Mic92

add encrypted /boot guide

imported>Zimbatm

→‎zimbatm's laptop recommendation: fix instructions

imported>Mic92

see also section.

imported>Zimbatm

add perf paragraph

imported>Zimbatm

no edit summary

imported>Zimbatm

fix formatting

imported>Zimbatm

no edit summary

imported>Fadenb

Syntax highlighting

imported>Makefu

initial batch of nixos-users