From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Fri, 12 Sep 2025 07:05:21 +0000 (+0200)
Subject: Add note on Encrypt=yes to Passphrase= docs
X-Git-Tag: v26~124
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=669d4418a3f053cf6cd063272e0c23ee3b4e2e7f;p=thirdparty%2Fmkosi.git

Add note on Encrypt=yes to Passphrase= docs

Fixes #3886
---

diff --git a/mkosi/resources/man/mkosi.1.md b/mkosi/resources/man/mkosi.1.md
index 84cfae16d..9303f6cde 100644
--- a/mkosi/resources/man/mkosi.1.md
+++ b/mkosi/resources/man/mkosi.1.md
@@ -1350,6 +1350,11 @@ boolean argument: either `1`, `yes`, or `true` to enable, or `0`, `no`,
     `/etc/crypttab` expect the passphrase files). The file must have an
     access mode of 0600 or less.
 
+    Note that this setting on its own does not enable any encryption.
+    You also have to add one or more partition definition files to
+    `mkosi.repart/` with `Encrypt=key-file` to add encrypted partitions
+    to the image.
+
 `Checksum=`, `--checksum=`
 :   Generate a `<output>.SHA256SUMS` file of all generated artifacts
     after the build is complete.