Fix: hydractl: provision: run cryptsetup mostly with defaults, which nowadays ensures...

diff --git a/share/hydractl/provision b/share/hydractl/provision
index 99853f0732092aaea6d6977c184de341dd5e6053..783f2aec218a2d2bbe7950d8ec76fcf38890a130 100755 (executable)
--- a/share/hydractl/provision
+++ b/share/hydractl/provision
@@ -54,13 +54,13 @@ function hydra_cryptsetup {
     # Run cryptsetup with custom parameters
     #hydra_sudo_run cryptsetup --cipher aes-xts-plain64:sha256 --key-size 512 --hash sha512 --iter-time 5000 --use-random -y -q luksFormat $1
 
-    # Run cryptsetup mostly with defaults
-    #hydra_sudo_run cryptsetup --use-random -y -q luksFormat $1
-
     # GRUB2 from bullseye (or even older) does not support LUKS2, which seems
     # the default type for luksFormat since bullseye at least
     # See https://cryptsetup-team.pages.debian.net/cryptsetup/encrypted-boot.html
-    hydra_sudo_run cryptsetup --use-random -y -q luksFormat --type luks1 $1
+    #hydra_sudo_run cryptsetup --use-random -y -q luksFormat --type luks1 $1
+
+    # Run cryptsetup mostly with defaults
+    hydra_sudo_run cryptsetup --use-random -y -q luksFormat $1
   fi
 }