Normalize LUKS boot layout and partitioning defaults

2025-12-28 16:00:49 +01:00
parent 2be6117aac
commit cc77f646d7
6 changed files with 196 additions and 91 deletions
--- a/roles/configuration/tasks/grub.yml
+++ b/roles/configuration/tasks/grub.yml
@@ -106,8 +106,7 @@
        label: "{{ item.path }}"

 - name: Enable GRUB cryptodisk for encrypted /boot
-  when:
-    - partitioning_luks_enabled | default(luks_enabled | default(false)) | bool
+  when: partitioning_grub_enable_cryptodisk | default(false) | bool
  ansible.builtin.lineinfile:
    path: /mnt/etc/default/grub
    regexp: '^GRUB_ENABLE_CRYPTODISK='