about summary refs log tree commit diff
path: root/nixos/modules/system/boot/stage-1.nix
diff options
context:
space:
mode:
authorMichele Guerini Rocco <rnhmjoj@users.noreply.github.com>2024-02-14 14:35:04 +0100
committerGitHub <noreply@github.com>2024-02-14 14:35:04 +0100
commitc1f27ae1d3d2d59f495370dd3b14d77dc9261801 (patch)
tree33df17990a793f7460e18bd37ec674ffa3c1dfd9 /nixos/modules/system/boot/stage-1.nix
parentfb4f8ae247f1042f57cd712eb35d216434b7e985 (diff)
parent73f666a2044602d00c65a10d50a4906661155bba (diff)
Merge pull request #199515 from MangoIV/mangoiv/add-note-to-boot-initrd-secrets
Add documentation for moved secrets in stage 1 
Diffstat (limited to 'nixos/modules/system/boot/stage-1.nix')
-rw-r--r--nixos/modules/system/boot/stage-1.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/nixos/modules/system/boot/stage-1.nix b/nixos/modules/system/boot/stage-1.nix
index e990aeea7a14b..8f3f3612805f2 100644
--- a/nixos/modules/system/boot/stage-1.nix
+++ b/nixos/modules/system/boot/stage-1.nix
@@ -621,6 +621,11 @@ in
             path the secret should have inside the initrd, the value
             is the path it should be copied from (or null for the same
             path inside and out).
+
+            Note that `nixos-rebuild switch` will generate the initrd
+            also for past generations, so if secrets are moved or deleted
+            you will also have to garbage collect the generations that
+            use those secrets.
           '';
         example = literalExpression
           ''