Simon Bruder
0ec1fb5257
This should increase LUKS performance significantly. In reality, however, it doesn’t work that well. The difference of raw vs encrypted block device speed still ist ~ 100 MiB/s. Even more confusing is that nunotaba’s Intel DC SSD only manages ~ 350 MiB/s **without** encryption.
69 lines
1.6 KiB
Nix
69 lines
1.6 KiB
Nix
{ config, lib, modulesPath, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(modulesPath + "/installer/scan/not-detected.nix")
|
|
<nixos-hardware/common/cpu/intel>
|
|
<nixos-hardware/common/pc/ssd>
|
|
];
|
|
|
|
boot = {
|
|
kernelModules = [ "kvm-intel" ];
|
|
extraModulePackages = [ ];
|
|
loader.grub.device = "/dev/disk/by-id/ata-MTFDDAK256TBN-1AR15ABHA_UFZMQ01ZR50NMM";
|
|
initrd = {
|
|
availableKernelModules = [ "aesni_intel" "ahci" "ehci_pci" "sd_mod" "usb_storage" "usbhid" "xhci_pci" ];
|
|
kernelModules = [ "dm-snapshot" ];
|
|
luks.devices = {
|
|
root = {
|
|
name = "root";
|
|
device = "/dev/disk/by-uuid/d7e4d213-8a13-4059-a011-0f68081e86d8";
|
|
preLVM = true;
|
|
allowDiscards = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
fileSystems = {
|
|
"/" = {
|
|
device = "/dev/disk/by-uuid/024e31ab-aa98-4070-95be-7980043541ac";
|
|
fsType = "ext4";
|
|
options = [ "discard" "noatime" ];
|
|
};
|
|
|
|
"/boot" = {
|
|
device = "/dev/disk/by-uuid/c5bde64b-c629-438d-a78b-c4341796dae9";
|
|
fsType = "ext2";
|
|
};
|
|
|
|
"/data" = {
|
|
device = "/dev/mapper/data";
|
|
encrypted = {
|
|
label = "data";
|
|
enable = true;
|
|
blkDev = "/dev/disk/by-uuid/576088d4-9aae-4159-a028-feadb2621a1a";
|
|
keyFile = "/mnt-root" + toString <secrets/luks-data>;
|
|
};
|
|
};
|
|
};
|
|
|
|
swapDevices = [
|
|
{ device = "/dev/disk/by-uuid/78f5277f-a6e5-4297-99cd-d3ea5de5317e"; }
|
|
];
|
|
|
|
powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
|
|
|
|
# GPU
|
|
hardware.opengl.extraPackages = with pkgs; [
|
|
amdvlk
|
|
rocm-opencl-icd
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
clinfo
|
|
radeontop
|
|
rocm-smi
|
|
];
|
|
}
|