diff options
| author | Vladimir Panteleev <git@cy.md> | 2024-12-31 09:21:25 +0000 |
|---|---|---|
| committer | Vladimir Panteleev <git@cy.md> | 2024-12-31 09:21:25 +0000 |
| commit | a5cc2d090e0d8b62e843f955c9148d54895fa415 (patch) | |
| tree | ef9446e072b6e896c5342c4643838f10e62d2390 /pkgs/development/python-modules/rangehttpserver | |
| parent | 84564712e67fd10bcee1650b5fb905150fe43354 (diff) | |
nixos/luksroot: Check if the device was opened while reading password
Helps the following situation:
- SSH in initrd is enabled
- NixOS is waiting for a password to be typed at the console (or
provided via cryptsetup-askpass)
- The user logs in via SSH, but instead of running cryptsetup-askpass,
they run "cryptsetup open" directly (because they don't know that
they need to use NixOS's cryptsetup-askpass script, or because they
want to use a non-trivial unlocking method that is not natively
supported by this module)
Currently, in the above situation, NixOS will keep waiting for a
password to be entered even though the device is already unlocked. If
a password is entered, it will print a confusing "already exists"
error and keep asking for the same password.
We can improve on this by simply checking if the device is already
unlocked in our read loop. In this case, we don't need to do anything
other than return from the function and continue booting.
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions
