Make aesni_intel module available on boot
This should increase LUKS performance significantly. In reality, however, it doesn’t work that well. The difference of raw vs encrypted block device speed still ist ~ 100 MiB/s. Even more confusing is that nunotaba’s Intel DC SSD only manages ~ 350 MiB/s **without** encryption.
This commit is contained in:
parent
dd93b4c748
commit
0ec1fb5257
|
@ -12,7 +12,7 @@
|
||||||
extraModulePackages = [ ];
|
extraModulePackages = [ ];
|
||||||
loader.grub.device = "/dev/disk/by-id/ata-INTEL_SSDSC2KB480G7_PHYS749202D6480BGN";
|
loader.grub.device = "/dev/disk/by-id/ata-INTEL_SSDSC2KB480G7_PHYS749202D6480BGN";
|
||||||
initrd = {
|
initrd = {
|
||||||
availableKernelModules = [ "ahci" "ehci_pci" "rtsx_pci_sdmmc" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ];
|
availableKernelModules = [ "aesni_intel" "ahci" "ehci_pci" "rtsx_pci_sdmmc" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ];
|
||||||
kernelModules = [ "dm-snapshot" ];
|
kernelModules = [ "dm-snapshot" ];
|
||||||
luks.devices = {
|
luks.devices = {
|
||||||
root = {
|
root = {
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
extraModulePackages = [ ];
|
extraModulePackages = [ ];
|
||||||
loader.grub.device = "/dev/disk/by-id/ata-MTFDDAK256TBN-1AR15ABHA_UFZMQ01ZR50NMM";
|
loader.grub.device = "/dev/disk/by-id/ata-MTFDDAK256TBN-1AR15ABHA_UFZMQ01ZR50NMM";
|
||||||
initrd = {
|
initrd = {
|
||||||
availableKernelModules = [ "ahci" "ehci_pci" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ];
|
availableKernelModules = [ "aesni_intel" "ahci" "ehci_pci" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ];
|
||||||
kernelModules = [ "dm-snapshot" ];
|
kernelModules = [ "dm-snapshot" ];
|
||||||
luks.devices = {
|
luks.devices = {
|
||||||
root = {
|
root = {
|
||||||
|
|
|
@ -10,7 +10,7 @@
|
||||||
extraModulePackages = [ ];
|
extraModulePackages = [ ];
|
||||||
kernelParams = [ "ip=dhcp" ];
|
kernelParams = [ "ip=dhcp" ];
|
||||||
initrd = {
|
initrd = {
|
||||||
availableKernelModules = [ "ata_piix" "virtio_pci" "xhci_pci" "sd_mod" "sr_mod" ];
|
availableKernelModules = [ "aesni_intel" "ata_piix" "virtio_pci" "xhci_pci" "sd_mod" "sr_mod" ];
|
||||||
kernelModules = [ ];
|
kernelModules = [ ];
|
||||||
network.enable = true; # remote unlocking
|
network.enable = true; # remote unlocking
|
||||||
luks.devices."root".device = "/dev/disk/by-uuid/9d3f544f-d502-4788-8187-1378a9ee0103";
|
luks.devices."root".device = "/dev/disk/by-uuid/9d3f544f-d502-4788-8187-1378a9ee0103";
|
||||||
|
|
Loading…
Reference in a new issue