stage-1: create temporary secrets directory in /tmp and not in cwd

2019-11-19 20:41:56 +01:00
parent c56fbe4e09
commit 330218e69a
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/system/boot/stage-1.nix
+++ b/nixos/modules/system/boot/stage-1.nix
@@ -366,7 +366,7 @@ let
        }
        trap cleanup EXIT

-        tmp=$(mktemp -d initrd-secrets.XXXXXXXXXX)
+        tmp=$(mktemp -d ''${TMPDIR:-/tmp}/initrd-secrets.XXXXXXXXXX)

        ${lib.concatStringsSep "\n" (mapAttrsToList (dest: source:
            let source' = if source == null then dest else toString source; in