From 25f3ada46dc66592aada3b2a66ebb25b1243ab33 Mon Sep 17 00:00:00 2001
From: Jorge Ramirez-Ortiz <jorge@foundries.io>
Date: Tue, 5 Nov 2024 11:27:46 +0100
Subject: [PATCH] rm: CI LUKS encryption

Following https://github.com/foundriesio/meta-lmp/pull/1530, we now
allow users to define their own passphrases for CI LUKS encryption.

Signed-off-by: Jorge Ramirez-Ortiz <jorge@foundries.io>
---
 source/reference-manual/linux/linux-disk-encryption.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/source/reference-manual/linux/linux-disk-encryption.rst b/source/reference-manual/linux/linux-disk-encryption.rst
index 33c28e45..a539ca4b 100644
--- a/source/reference-manual/linux/linux-disk-encryption.rst
+++ b/source/reference-manual/linux/linux-disk-encryption.rst
@@ -11,9 +11,13 @@ LUKS to construct a symmetrically encrypted root file-system. The master
 key used for data encryption is protected and unlocked using a
 passphrase.
 
+Users can choose their own passphrase; if they don't, LmP will generate
+one for them.
+
 .. code-block:: console
 
   OSTREE_OTA_EXT4_LUKS = "1"
+  OSTREE_OTA_EXT4_LUKS_PASSPHRASE = "fiopassphrase"
 
 The LmP default configuration is to have this feature disabled.