Simon Bruder
0ec1fb5257
This should increase LUKS performance significantly. In reality, however, it doesn’t work that well. The difference of raw vs encrypted block device speed still ist ~ 100 MiB/s. Even more confusing is that nunotaba’s Intel DC SSD only manages ~ 350 MiB/s **without** encryption.
50 lines
1.2 KiB
Nix
50 lines
1.2 KiB
Nix
{ config, lib, pkgs, modulesPath, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(modulesPath + "/profiles/qemu-guest.nix")
|
|
];
|
|
|
|
boot = {
|
|
kernelModules = [ ];
|
|
extraModulePackages = [ ];
|
|
kernelParams = [ "ip=dhcp" ];
|
|
initrd = {
|
|
availableKernelModules = [ "aesni_intel" "ata_piix" "virtio_pci" "xhci_pci" "sd_mod" "sr_mod" ];
|
|
kernelModules = [ ];
|
|
network.enable = true; # remote unlocking
|
|
luks.devices."root".device = "/dev/disk/by-uuid/9d3f544f-d502-4788-8187-1378a9ee0103";
|
|
};
|
|
loader.grub.device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0-0-0-0";
|
|
};
|
|
|
|
fileSystems = {
|
|
"/" = {
|
|
device = "/dev/disk/by-uuid/cad3325d-775d-4771-bb2d-7beaff9dbaf1";
|
|
fsType = "ext4";
|
|
};
|
|
"/boot" = {
|
|
device = "/dev/disk/by-uuid/52c65d2f-2208-48aa-9d0a-592bca2ecfe3";
|
|
fsType = "ext2";
|
|
};
|
|
};
|
|
|
|
networking.useDHCP = false;
|
|
networking.usePredictableInterfaceNames = false;
|
|
systemd.network = {
|
|
enable = true;
|
|
networks = {
|
|
eth0 = {
|
|
name = "eth0";
|
|
DHCP = "yes";
|
|
domains = [ "sbruder.de" ];
|
|
address = [ "2a01:4f8:1c1c:4397::/64" ];
|
|
gateway = [ "fe80::1" ];
|
|
};
|
|
};
|
|
};
|
|
|
|
# no smart on qemu disk
|
|
services.smartd.enable = false;
|
|
}
|