| options/nixos/boot.initrd.luks.devices | The encrypted disk that should be opened before the root
filesystem is mounted
|
| options/nixos/boot.initrd.luks.cryptoModules | A list of cryptographic kernel modules needed to decrypt the root device(s)
|
| options/nixos/boot.initrd.luks.yubikeySupport | Enables support for authenticating with a YubiKey on LUKS devices
|
| options/nixos/boot.initrd.luks.mitigateDMAAttacks | Unless enabled, encryption keys can be easily recovered by an attacker with physical
access to any machine with PCMCIA, ExpressCard, ThunderBolt or FireWire port
|
| options/nixos/boot.initrd.luks.reusePassphrases | When opening a new LUKS device try reusing last successful
passphrase
|
| options/nixos/boot.initrd.luks.fido2Support | Enables support for authenticating with FIDO2 devices.
|