cryptsetup.nix

{ pkgs, ... }:

{
  boot.initrd = {
    availableKernelModules = [
      "aes"
      "aes_generic"
      "aes_x86_64"
      "blowfish"
      "cbc"
      "cryptd"
      "dm_crypt"
      "dm_mod"
      "ecb"
      "lrw"
      "serpent"
      "sha1"
      "sha256"
      "sha512"
      "twofish"
      "xts"
    ];

    extraUtilsCommands = ''
      copy_bin_and_libs ${pkgs.cryptsetup}/bin/cryptsetup
    '';
    
    preLVMCommands = ''
      cryptsetup luksOpen /dev/disk/by-uuid/ab525ac9-88aa-4b7b-9997-1600252aff6a luksroot --allow-discards
    '';
  };

  environment.systemPackages = with pkgs; [ cryptsetup ];
}