NixOS full disk encryption

gistfile1.txt

sudo su

sgdisk -o -g -n 1::+550M -t 1:ef00 -n 2:: -t 2:8300 /dev/nvme0n1

cryptsetup luksFormat --type luks1 /dev/nvme0n1p2
cryptsetup open /dev/nvme0n1p2 lvm

pvcreate /dev/mapper/lvm
vgcreate vg /dev/mapper/lvm
lvcreate -L 32G -n swap vg
lvcreate -l '100%FREE' -n root vg

mkfs.vfat -F32 /dev/nvme0n1p1
mkfs.ext4 -L root /dev/vg/root
mkswap -L swap /dev/vg/swap

swapon /dev/vg/swap
mount /dev/vg/root /mnt
mkdir -p /mnt/boot/efi
mount /dev/nvme0n1p1 /mnt/boot/efi

nixos-generate-config --root /mnt

# Edit /mnt/etc/nixos/configuration.nix with vim