diff options
| author | Rouven Czerwinski <rouven@czerwinskis.de> | 2020-04-12 15:04:02 +0200 |
|---|---|---|
| committer | Rouven Czerwinski <rouven@czerwinskis.de> | 2020-04-12 15:12:38 +0200 |
| commit | 61da203324125f1969da086cb297c1ecd76350a6 (patch) | |
| tree | c8d737dbd4327fa83c2c1d818d2fc282667c9c41 /nixos/modules/system/boot/luksroot.nix | |
| parent | 99b5068c263b09e5c401e5d677ba57c470aec702 (diff) | |
| download | nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.tar nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.tar.gz nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.tar.bz2 nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.tar.lz nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.tar.xz nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.tar.zst nixpkgs-61da203324125f1969da086cb297c1ecd76350a6.zip | |
boot.initrd.luks: remove x86_64/i586 AES modules
Commit 1d2c3279311e4f03fcf164e1366f2fda9f4bfccf in the upstream kernel repository removed support for the scalar x86_64 and i586 AES assembly implementations, since the generic AES implementation generated by the compiler is faster for both platforms. Remove the modules from the cryptoModules list. This causes a regression for kernel versions >=5.4 which include the removal. This should have no negative impact on AES performance on older kernels since the generic implementation should be faster there as well since the implementation was hardly touched from its initial submission. Fixes #84842
Diffstat (limited to 'nixos/modules/system/boot/luksroot.nix')
| -rw-r--r-- | nixos/modules/system/boot/luksroot.nix | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/nixos/modules/system/boot/luksroot.nix b/nixos/modules/system/boot/luksroot.nix index 31f1e22cda3..7e406f37c13 100644 --- a/nixos/modules/system/boot/luksroot.nix +++ b/nixos/modules/system/boot/luksroot.nix @@ -467,8 +467,6 @@ in [ "aes" "aes_generic" "blowfish" "twofish" "serpent" "cbc" "xts" "lrw" "sha1" "sha256" "sha512" "af_alg" "algif_skcipher" - - (if pkgs.stdenv.hostPlatform.system == "x86_64-linux" then "aes_x86_64" else "aes_i586") ]; description = '' A list of cryptographic kernel modules needed to decrypt the root device(s). |