# crypto — Initialize Kernel Cryptographic Framework

[service]
name = "crypto"
description = "Kernel cryptographic framework"
type = "oneshot"

[exec]
start = "/etc/zyginit/crypto/start.sh"

[runlevel]
# Required if filesystem mounts include encrypted ZFS datasets — keys
# must be loaded before the filesystem service can mount them. Cheap
# enough to run unconditionally.
mode = "always"

[dependencies]
requires = ["root-fs"]

[restart]
on = "never"
