How to test luks setup with --vm-test

[haraldh]

Is there any trick how I can test a luks setup with --vm-test. Doing so always fails to unlock the luks device in the booted_machine stage of course, because the key files are missing.

[Mic92]

There is no trick as of today. Those VMs also run in a nix-build, which would require adding secrets. Maybe there could be a way to allow stub secrets for testing.

[haraldh]

Thanks for the quick answer! Yeah, stub secrets would be great!

[Mic92]

@Lassulus could we recursively override all existing cryptsetup keys with fake keys? Same for zfs.

[Mic92]

Not sure how could provide these keys at boot time...

[haraldh]

maybe https://systemd.io/CREDENTIALS/

VMs can be passed credentials via SMBIOS OEM strings (example qemu command line switch -smbios type=11,value=io.systemd.credential:foo=bar