···

       
233
       
 
       
                    tries=3

     

       
234
       
 
       
                    success=false

     

       
235
       
 
       
                    while [[ $success != true ]] && [[ $tries -gt 0 ]]; do

     

       
236
       
-
       
                      ${systemd}/bin/systemd-ask-password --timeout=${toString cfgZfs.passwordTimeout} "Enter key for $ds:" | ${cfgZfs.package}/sbin/zfs load-key "$ds" \

     

       
237
       
 
       
                        && success=true \

     

       
238
       
 
       
                        || tries=$((tries - 1))

     

       
239
       
 
       
                    done

     
···

       
402
       
 
       
          an interactive prompt (keylocation=prompt) and from a file (keylocation=file://).

     

       
403
       
 
       
        '';

     

       
404
       
 
       
      };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
405
       
 
       


     

       
406
       
 
       
      passwordTimeout = lib.mkOption {

     

       
407
       
 
       
        type = lib.types.int;

     

···

       
233
       
 
       
                    tries=3

     

       
234
       
 
       
                    success=false

     

       
235
       
 
       
                    while [[ $success != true ]] && [[ $tries -gt 0 ]]; do

     

       
236
       
+
       
                      ${systemd}/bin/systemd-ask-password ${lib.optionalString cfgZfs.useKeyringForCredentials ("--keyname=zfs-$ds")} --timeout=${toString cfgZfs.passwordTimeout} "Enter key for $ds:" | ${cfgZfs.package}/sbin/zfs load-key "$ds" \

     

       
237
       
 
       
                        && success=true \

     

       
238
       
 
       
                        || tries=$((tries - 1))

     

       
239
       
 
       
                    done

     
···

       
402
       
 
       
          an interactive prompt (keylocation=prompt) and from a file (keylocation=file://).

     

       
403
       
 
       
        '';

     

       
404
       
 
       
      };

     

       
405
       
+
       


     

       
406
       
+
       
      useKeyringForCredentials = lib.mkEnableOption "Uses the kernel keyring for encryption credentials with keyname=zfs-<poolname>";

     

       
407
       
 
       


     

       
408
       
 
       
      passwordTimeout = lib.mkOption {

     

       
409
       
 
       
        type = lib.types.int;