server10: initrd systemd

hosts/server10/default.nix

@@ -13,6 +13,7 @@
   };
 
   boot = {
+    initrd.availableKernelModules = [ "e1000e" ];
     loader.grub = lib.mkIf (!options?isoImage) {
       enable = true;
       device = "/dev/sda";

modules/baremetal.nix

@@ -15,7 +15,10 @@
     ];
 
     boot = {
-      initrd.network = {
+      initrd = {
+        # make sure to set availableKernelModules otherwise it won't work!
+        # the module can be found in a booted system by running `dmesg | rg "Link"` and looking at the first word after the date
+        network = {
           enable = true;
           ssh = {
             enable = true;
@@ -26,12 +29,20 @@
             ];
             port = 4748;
           };
-        postCommands = ''
+          postCommands = lib.mkIf (!config.boot.initrd.systemd.enable) ''
             cat <<EOF > /root/.profile
             cryptsetup-askpass
             EOF
           '';
         };
+        systemd = {
+          enable = true;
+          inherit (config.systemd) network;
+          contents."/etc/profile".text = ''
+            systemd-tty-ask-password-agent
+          '';
+        };
+      };
       kernelParams = [
         # "boot.shell_on_fail"
         "zfs_force=1"