WIP: fix(web01,extermal01,tower01): get rid of /dev/zero as a keyfile #806

Draft

mdebray wants to merge 1 commit from fix_encryption into main

pull from: fix_encryption

merge into: DGNum:main

DGNum:main

DGNum:nixos2605

DGNum:hypervisor-incus

DGNum:metis-main

DGNum:fix_grist_license

DGNum:lon/wp4nix

DGNum:lon/nixos-unstable

DGNum:lon/nixos-25.11

DGNum:lon/lix-module

DGNum:lon/lix-diff

DGNum:lon/lix

DGNum:lon/git-hooks

DGNum:lon/dns.nix

DGNum:lon/colmena

DGNum:update_nixos_2511

DGNum:grafana_role_mgmt

DGNum:build01_m_a

DGNum:ulogd_socket_buffer_maxsize

DGNum:pipe

DGNum:netgraph

DGNum:move_netbird

DGNum:reaction_ssh

DGNum:lixcon

DGNum:forgejo_io_accounting

DGNum:fix_wifi

DGNum:ielo

DGNum:grist

DGNum:hypervisor-linstor

DGNum:django-apps/versions-publish

DGNum:nixos-25.11

DGNum:isp/gretap

DGNum:meta/ipam

DGNum:peertube_max_size

DGNum:feat/listmonk

DGNum:ipam

DGNum:netcore_hyp

DGNum:bgp_test

DGNum:no-id-list

DGNum:jdl-site

DGNum:gretap

DGNum:lon/liminix

DGNum:external_upgrade

DGNum:takumiv2

DGNum:init_2511_pin

DGNum:automatic-updates

DGNum:disable_geo_bk

DGNum:external01

DGNum:zulip

DGNum:pkg-update

DGNum:test-Jaccess01

DGNum:geo01-no-notify

DGNum:alert-manager-notify

DGNum:deploy_jdl

DGNum:jdl01

DGNum:drbd

DGNum:zulip_11_x

DGNum:labrouter-wg

DGNum:zulipmail

DGNum:feature/add-bmc-ips

DGNum:build01-journald

DGNum:mdebray/nixos-25.05

DGNum:declarative-buckets

DGNum:vault01-isp

DGNum:demarches01

DGNum:hackdays-ap

DGNum:raito/zulip

DGNum:staging-cas

DGNum:testing02

DGNum:ban_git_scrappers

DGNum:hypervisor

DGNum:victoria-metrics

DGNum:init-dgnum-page

DGNum:takumi-can-do-ollama

Conversation 0 Commits 1 Files changed 3 +10 -20

mdebray commented 2026-06-06 19:33:15 +02:00

Owner

Copy link

The new initrd does not support depending on /dev/zero for luks
decryption

The new initrd does not support depending on /dev/zero for luks decryption

mdebray added 1 commit 2026-06-06 19:33:15 +02:00

fix(web01,extermal01,tower01): get rid of /dev/zero as a keyfile ... 8974adba14

The new initrd does not support depending on /dev/zero for luks
decryption

mdebray force-pushed fix_encryption from 8974adba14 to d79120b63b 2026-06-06 19:43:04 +02:00 Compare

All checks were successful

Hide all checks

Check meta / check_meta (pull_request) Successful in 6s

Required

Details

Check workflows / check_workflows (pull_request) Successful in 7s

Required

Details

Run pre-commit on all files / pre-commit (push) Successful in 30s

Required

Details

Build all the nodes / AP-test (pull_request) Successful in 51s

Required

Details

Build all the nodes / geo01 (pull_request) Successful in 1m2s

Required

Details

Build the shell / build-shell (pull_request) Successful in 39s

Required

Details

Build all the nodes / bridge01 (pull_request) Successful in 1m7s

Required

Details

Build all the nodes / build01 (pull_request) Successful in 1m7s

Required

Details

Build all the nodes / optic-loop (pull_request) Successful in 1m3s

Required

Details

Build all the nodes / external01 (pull_request) Successful in 1m8s

Required

Details

Build all the nodes / cof02 (pull_request) Successful in 1m9s

Required

Details

Show derivation diffs / AP-test (pull_request) Successful in 1m15s

Details

Show derivation diffs / bridge01 (pull_request) Successful in 1m14s

Details

Build all the nodes / sw-Montrouge (pull_request) Successful in 59s

Required

Details

Build all the nodes / sw-Pantheon (pull_request) Successful in 57s

Required

Details

Build all the nodes / sw-Jourdan (pull_request) Successful in 59s

Required

Details

Build all the nodes / hypervisors0 (pull_request) Successful in 1m16s

Required

Details

Show derivation diffs / build01 (pull_request) Successful in 1m15s

Details

Build all the nodes / lab-router01 (pull_request) Successful in 1m15s

Required

Details

Build all the nodes / geo02 (pull_request) Successful in 1m16s

Required

Details

Build all the nodes / AP-jourdan (pull_request) Successful in 1m22s

Required

Details

Build all the nodes / compute01 (pull_request) Successful in 1m21s

Required

Details

Build all the nodes / hypervisors1 (pull_request) Successful in 1m17s

Required

Details

Build all the nodes / iso (pull_request) Successful in 1m18s

Required

Details

Build all the nodes / web02 (pull_request) Successful in 58s

Required

Details

Build all the nodes / krz01 (pull_request) Successful in 1m18s

Required

Details

Build all the nodes / web03 (pull_request) Successful in 57s

Required

Details

Build all the nodes / tower01 (pull_request) Successful in 1m1s

Required

Details

Build all the nodes / storage01 (pull_request) Successful in 1m5s

Required

Details

Show derivation diffs / cof02 (pull_request) Successful in 1m24s

Details

Build all the nodes / web01 (pull_request) Successful in 1m12s

Required

Details

Build all the nodes / AP-montrouge (pull_request) Successful in 1m38s

Required

Details

Build all the nodes / rescue01 (pull_request) Successful in 1m21s

Required

Details

Build all the nodes / vault03 (pull_request) Successful in 1m16s

Required

Details

Build all the nodes / vault02 (pull_request) Successful in 1m17s

Required

Details

Build all the nodes / vault01 (pull_request) Successful in 1m18s

Required

Details

Build all the nodes / AP-pantheon (pull_request) Successful in 1m56s

Required

Details

Show derivation diffs / AP-jourdan (pull_request) Successful in 2m29s

Details

Show derivation diffs / compute01 (pull_request) Successful in 2m2s

Details

Show derivation diffs / geo01 (pull_request) Successful in 1m15s

Details

Show derivation diffs / geo02 (pull_request) Successful in 1m17s

Details

Show derivation diffs / external01 (pull_request) Successful in 1m24s

Details

Show derivation diffs / hypervisors0 (pull_request) Successful in 1m35s

Details

Show derivation diffs / optic-loop (pull_request) Successful in 24s

Details

Show derivation diffs / lab-router01 (pull_request) Successful in 55s

Details

Show derivation diffs / hypervisors1 (pull_request) Successful in 1m10s

Details

Show derivation diffs / iso (pull_request) Successful in 1m12s

Details

Show derivation diffs / krz01 (pull_request) Successful in 1m11s

Details

Show derivation diffs / AP-montrouge (pull_request) Successful in 3m45s

Details

Show derivation diffs / sw-Montrouge (pull_request) Successful in 23s

Details

Show derivation diffs / sw-Jourdan (pull_request) Successful in 27s

Details

Show derivation diffs / sw-Pantheon (pull_request) Successful in 21s

Details

Show derivation diffs / storage01 (pull_request) Successful in 54s

Details

Show derivation diffs / tower01 (pull_request) Successful in 37s

Details

Show derivation diffs / rescue01 (pull_request) Successful in 58s

Details

Show derivation diffs / AP-pantheon (pull_request) Successful in 4m38s

Details

Run pre-commit on all files / pre-commit (pull_request) Successful in 19s

Required

Details

Show derivation diffs / vault01 (pull_request) Successful in 1m19s

Details

Show derivation diffs / web02 (pull_request) Successful in 38s

Details

Show derivation diffs / web03 (pull_request) Successful in 49s

Details

Show derivation diffs / web01 (pull_request) Successful in 1m14s

Details

Show derivation diffs / vault03 (pull_request) Successful in 1m21s

Details

Show derivation diffs / vault02 (pull_request) Successful in 1m28s

Details

This pull request is marked as a work in progress.

This branch is out-of-date with the base branch

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin fix_encryption:fix_encryption

git switch fix_encryption

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

awaiting

awaiting-author

Awaiting for the author interaction (e.g. QA/confirmation/final merge)

  

awaiting

awaiting-reviewer

Awaiting for a privileged reviewer to approve this PR

  

bot

Pull Request opened by a bot

  

deployed

This PR is currently deployed on the infra

  

Silenced alert

This is a known and silenced alert.

  

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

awaiting

awaiting-author

awaiting

awaiting-reviewer

bot

deployed

Silenced alert

bug

duplicate

enhancement

help wanted

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

DGNum/infrastructure!806

No description provided.