19 lines
499 B
Plaintext
19 lines
499 B
Plaintext
# Set credential *ONLY IF* it's not embedded in the LUKS2 header
|
|
FIDO2LUKS_CREDENTIAL_ID=
|
|
|
|
# Encrypted device and its name under /dev/mapper
|
|
# Can be overridden by `cryptdevice` kernel parameter
|
|
FIDO2LUKS_DEVICE=
|
|
FIDO2LUKS_MAPPER_NAME=
|
|
|
|
FIDO2LUKS_SALT=string:<salt>
|
|
|
|
# Use specific keyslot (ignore all other slots)
|
|
FIDO2LUKS_DEVICE_SLOT=
|
|
|
|
# Await for an authenticator to be connected (in seconds)
|
|
FIDO2LUKS_DEVICE_AWAIT=
|
|
|
|
# Set to 1 if PIN is required to unlock the authenticator
|
|
FIDO2LUKS_ASK_PIN=
|