Add note on Encrypt=yes to Passphrase= docs

Fixes #3886

diff --git a/mkosi/resources/man/mkosi.1.md b/mkosi/resources/man/mkosi.1.md
index 84cfae16d287e5495f4b056eddd0ad90c215613f..9303f6cde2cc4f576775720e38cbe79bd0c913af 100644 (file)
--- a/mkosi/resources/man/mkosi.1.md
+++ b/mkosi/resources/man/mkosi.1.md
@@ -1350,6 +1350,11 @@ boolean argument: either `1`, `yes`, or `true` to enable, or `0`, `no`,
     `/etc/crypttab` expect the passphrase files). The file must have an
     access mode of 0600 or less.
 
+    Note that this setting on its own does not enable any encryption.
+    You also have to add one or more partition definition files to
+    `mkosi.repart/` with `Encrypt=key-file` to add encrypted partitions
+    to the image.
+
 `Checksum=`, `--checksum=`
 :   Generate a `<output>.SHA256SUMS` file of all generated artifacts
     after the build is complete.