···

       
23
       
23
       
 
       
        cryptroot2.device = "/dev/vdd";

     

       
24
       
24
       
 
       
      };

     

       
25
       
25
       
 
       
      virtualisation.bootDevice = "/dev/mapper/cryptroot";

     

       
26
       
26
       
+
       
      # test mounting device unlocked in initrd after switching root

     

       
27
       
27
       
+
       
      virtualisation.fileSystems."/cryptroot2".device = "/dev/mapper/cryptroot2";

     

       
26
       
28
       
 
       
    };

     

       
27
       
29
       
 
       
  };

     

       
28
       
30
       
 
       


     
···

       
31
       
33
       
 
       
    machine.wait_for_unit("multi-user.target")

     

       
32
       
34
       
 
       
    machine.succeed("echo -n supersecret | cryptsetup luksFormat -q --iter-time=1 /dev/vdc -")

     

       
33
       
35
       
 
       
    machine.succeed("echo -n supersecret | cryptsetup luksFormat -q --iter-time=1 /dev/vdd -")

     

       
36
       
36
       
+
       
    machine.succeed("echo -n supersecret | cryptsetup luksOpen   -q               /dev/vdd cryptroot2")

     

       
37
       
37
       
+
       
    machine.succeed("mkfs.ext4 /dev/mapper/cryptroot2")

     

       
34
       
38
       
 
       


     

       
35
       
39
       
 
       
    # Boot from the encrypted disk

     

       
36
       
40
       
 
       
    machine.succeed("bootctl set-default nixos-generation-1-specialisation-boot-luks.conf")

     
···

       
44
       
48
       
 
       
    machine.wait_for_unit("multi-user.target")

     

       
45
       
49
       
 
       


     

       
46
       
50
       
 
       
    assert "/dev/mapper/cryptroot on / type ext4" in machine.succeed("mount")

     

       
51
       
51
       
+
       
    assert "/dev/mapper/cryptroot2 on /cryptroot2 type ext4" in machine.succeed("mount")

     

       
47
       
52
       
 
       
  '';

     

       
48
       
53
       
 
       
})