cfg/aa-00-00/dmcrypt

# Inferencium - aa-00-00
# dm-crypt - Configuration
# Version: 4.0.0-alpha.1

# Copyright 2023 Jake Winters
# SPDX-License-Identifier: BSD-3-Clause


# Global
## How long to wait for each timeout (in seconds)
dmcrypt_key_timeout="1"
## Max number of checks to perform (see dmcrypt_key_timeout)
#dmcrypt_max_timeout="300"
# Number of password retries
dmcrypt_retries="5"


# swap
## These should come first so no keys make their way into unencrypted swap.
swap="swap"
source="PARTUUID=[REDACTED]"
options="--offset 2048 --cipher aes-xts-plain64 --key-size 512 --key-file /dev/urandom"
feat(name)!: rename file "dmcrypt" to include new system name Changing the system name technically changes the entire target of the file, so classify as a breaking change. 2025-06-27 18:28:20 +00:00			`# Inferencium - aa-00-00`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00			`# dm-crypt - Configuration`
feat(name)!: rename file "dmcrypt" to include new system name Changing the system name technically changes the entire target of the file, so classify as a breaking change. 2025-06-27 18:28:20 +00:00			`# Version: 4.0.0-alpha.1`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00
			`# Copyright 2023 Jake Winters`
Switch license from BSD 3-Clause Clear to BSD 3-Clause 2023-08-07 18:19:03 +01:00			`# SPDX-License-Identifier: BSD-3-Clause`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00

			`# Global`
			`## How long to wait for each timeout (in seconds)`
Wrap values in quotation marks 2024-02-13 02:13:07 +00:00			`dmcrypt_key_timeout="1"`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00			`## Max number of checks to perform (see dmcrypt_key_timeout)`
Wrap values in quotation marks 2024-02-13 02:13:07 +00:00			`#dmcrypt_max_timeout="300"`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00			`# Number of password retries`
Wrap values in quotation marks 2024-02-13 02:13:07 +00:00			`dmcrypt_retries="5"`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00

			`# swap`
			`## These should come first so no keys make their way into unencrypted swap.`
Wrap values in quotation marks 2024-02-13 02:13:07 +00:00			`swap="swap"`
Switch from device name to partition UUID Using partition UUID is safer than device name as it prevents accidental erasure of incorrect devices should the device names change. 2024-02-13 02:14:52 +00:00			`source="PARTUUID=[REDACTED]"`
Add device offset Adding an offset allows using a pinned UUID for the device via the pre-offset location on-device. The encryption occurs at the point of the offset, preventing erasure of the UUID, allowing partition UUID to be used as the target. 2024-02-13 02:24:12 +00:00			`options="--offset 2048 --cipher aes-xts-plain64 --key-size 512 --key-file /dev/urandom"`
Add system "aa000-0" configuration files 2023-08-07 17:12:19 +01:00