~ruther/guix-local: installer: Make LUKS2 the default format for encrypted devices

a82e9f45fd9f7c67123b7064c60065281035c744 — Josselin Poiret 4 years ago 4c5f970

installer: Make LUKS2 the default format for encrypted devices

* gnu/installer/parted.scm (luks-format-and-open): Change it.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

patch browse .tar.gz .zip

1 files changed, 3 insertions(+), 2 deletions(-)

M gnu/installer/parted.scm

M gnu/installer/parted.scm => gnu/installer/parted.scm +3 -2

@@ 1169,8 1169,9 @@ USER-PARTITION if it is encrypted, or the plain file-name otherwise."
      (lambda (key-file)
        (syslog "formatting and opening LUKS entry ~s at ~s~%"
                label file-name)
-       (system* "cryptsetup" "-q" "luksFormat" file-name key-file)
-       (system* "cryptsetup" "open" "--type" "luks"
+       (system* "cryptsetup" "-q" "luksFormat" "--type" "luks2"
+                "--pbkdf" "pbkdf2" file-name key-file)
+       (system* "cryptsetup" "open"
                 "--key-file" key-file file-name label)))))
 
 (define (luks-close user-partition)