From 0ec1fb5257f71616d7c6c4648a3f41f1bd7b1bd8 Mon Sep 17 00:00:00 2001 From: Simon Bruder Date: Wed, 17 Feb 2021 15:31:19 +0100 Subject: [PATCH] Make aesni_intel module available on boot MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This should increase LUKS performance significantly. In reality, however, it doesn’t work that well. The difference of raw vs encrypted block device speed still ist ~ 100 MiB/s. Even more confusing is that nunotaba’s Intel DC SSD only manages ~ 350 MiB/s **without** encryption. --- machines/nunotaba/hardware-configuration.nix | 2 +- machines/sayuri/hardware-configuration.nix | 2 +- machines/vueko/hardware-configuration.nix | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/machines/nunotaba/hardware-configuration.nix b/machines/nunotaba/hardware-configuration.nix index b1910ef..d09ddab 100644 --- a/machines/nunotaba/hardware-configuration.nix +++ b/machines/nunotaba/hardware-configuration.nix @@ -12,7 +12,7 @@ extraModulePackages = [ ]; loader.grub.device = "/dev/disk/by-id/ata-INTEL_SSDSC2KB480G7_PHYS749202D6480BGN"; initrd = { - availableKernelModules = [ "ahci" "ehci_pci" "rtsx_pci_sdmmc" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ]; + availableKernelModules = [ "aesni_intel" "ahci" "ehci_pci" "rtsx_pci_sdmmc" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ]; kernelModules = [ "dm-snapshot" ]; luks.devices = { root = { diff --git a/machines/sayuri/hardware-configuration.nix b/machines/sayuri/hardware-configuration.nix index 0336ac9..7e4a0bf 100644 --- a/machines/sayuri/hardware-configuration.nix +++ b/machines/sayuri/hardware-configuration.nix @@ -12,7 +12,7 @@ extraModulePackages = [ ]; loader.grub.device = "/dev/disk/by-id/ata-MTFDDAK256TBN-1AR15ABHA_UFZMQ01ZR50NMM"; initrd = { - availableKernelModules = [ "ahci" "ehci_pci" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ]; + availableKernelModules = [ "aesni_intel" "ahci" "ehci_pci" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ]; kernelModules = [ "dm-snapshot" ]; luks.devices = { root = { diff --git a/machines/vueko/hardware-configuration.nix b/machines/vueko/hardware-configuration.nix index 38a493e..77428f8 100644 --- a/machines/vueko/hardware-configuration.nix +++ b/machines/vueko/hardware-configuration.nix @@ -10,7 +10,7 @@ extraModulePackages = [ ]; kernelParams = [ "ip=dhcp" ]; initrd = { - availableKernelModules = [ "ata_piix" "virtio_pci" "xhci_pci" "sd_mod" "sr_mod" ]; + availableKernelModules = [ "aesni_intel" "ata_piix" "virtio_pci" "xhci_pci" "sd_mod" "sr_mod" ]; kernelModules = [ ]; network.enable = true; # remote unlocking luks.devices."root".device = "/dev/disk/by-uuid/9d3f544f-d502-4788-8187-1378a9ee0103";