···

       
404
       
404
       
 
       
        # so NSS can look up usernames

     

       
405
       
405
       
 
       
        "${pkgs.glibc}/lib/libnss_files.so.2"

     

       
406
       
406
       
 
       
      ] ++ optionals cfg.package.withCryptsetup [

     

       
407
       
407
       
+
       
        # tpm2 support

     

       
408
       
408
       
+
       
        "${cfg.package}/lib/cryptsetup/libcryptsetup-token-systemd-tpm2.so"

     

       
409
       
409
       
+
       
        pkgs.tpm2-tss

     

       
410
       
410
       
+
       


     

       
411
       
411
       
+
       
        # fido2 support

     

       
412
       
412
       
+
       
        "${cfg.package}/lib/cryptsetup/libcryptsetup-token-systemd-fido2.so"

     

       
413
       
413
       
+
       
        "${pkgs.libfido2}/lib/libfido2.so.1"

     

       
414
       
414
       
+
       


     

       
407
       
415
       
 
       
        # the unwrapped systemd-cryptsetup executable

     

       
408
       
416
       
 
       
        "${cfg.package}/lib/systemd/.systemd-cryptsetup-wrapped"

     

       
409
       
417
       
 
       
      ] ++ jobScripts;