reNixos/kyra/disko/disk.nix
s0me1newithhand7s 72def65f54 kyra(hardening): ESP 1G->128M, LUKS2 volume and options hadrening
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00

61 lines
1.4 KiB
Nix

{name, ...}: {
disko = {
devices = {
disk = {
"virt_main" = {
device =
{
"yara" = "/dev/vda";
}.${
name
} or "/dev/sda";
type = "disk";
content = {
type = "gpt";
partitions = {
boot = {
name = "boot";
size = "1M";
type = "EF02";
};
ESP = {
name = "ESP";
size = "128M";
type = "EF00";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
mountOptions = [
"umask=0077"
"noexec"
"nosuid"
"nodev"
"ro"
];
};
};
luks = {
size = "100%";
content = {
type = "luks";
name = "crypted";
settings = {
allowDiscards = true;
};
content = {
type = "lvm_pv";
vg = "pool";
};
};
};
};
};
};
};
};
};
}