nix-config/modules/ensure-pcr.nix
2025-01-14 22:20:08 +01:00

14 lines
255 B
Nix

{ lib, ... }:
{
options.boot.initrd.luks.devices = lib.mkOption {
type =
with lib.types;
attrsOf (submodule {
config.crypttabExtraOpts = [
"tpm2-device=auto"
"tpm2-measure-pcr=yes"
];
});
};
}