pyrox.dev
1{
2 config,
3 lib,
4 pkgs,
5 ...
6}:
7# TODO: make ecryptfs work in initramfs?
8
9with lib;
10
11{
12 config = mkIf (config.boot.supportedFilesystems.ecryptfs or false) {
13 system.fsPackages = [ pkgs.ecryptfs ];
14 security.wrappers = {
15 "mount.ecryptfs_private" = {
16 setuid = true;
17 owner = "root";
18 group = "root";
19 source = "${pkgs.ecryptfs.out}/bin/mount.ecryptfs_private";
20 };
21 "umount.ecryptfs_private" = {
22 setuid = true;
23 owner = "root";
24 group = "root";
25 source = "${pkgs.ecryptfs.out}/bin/umount.ecryptfs_private";
26 };
27 };
28 };
29}