Mirrors/disko
2
0
Fork 0
mirror of https://github.com/nix-community/disko synced 2024-11-10 06:14:14 +00:00
Code Issues Projects Releases Packages Wiki Activity

luks: don't leak secret in debug logs

Browse source
This commit is contained in:
Jörg Thalheim 2023-09-25 16:51:25 +02:00 committed by mergify[bot]
parent 0b178c0554
commit b18f43a9c2
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
lib/types/luks.nix
View file

@ -4,7 +4,8 @@ let
if lib.hasAttr "keyFile" config.settings
then config.settings.keyFile
else if config.passwordFile != null
then ''<(echo -n "$(cat ${config.passwordFile})")''
# do not print the password to the console
then ''<(set +x; echo -n "$(cat ${config.passwordFile})"; set -x)''
else if config.keyFile != null
then
lib.warn