anchor.diff:          cryptroot2.device = "/dev/vdd";
         };
         virtualisation.bootDevice = "/dev/mapper/cryptroot";
  +      # test mounting device unlocked in initrd after switching root
  +      virtualisation.fileSystems."/cryptroot2".device = "/dev/mapper/cryptroot2";
       };
     };
   
  
positive.code:     machine.wait_for_unit("multi-user.target")
      machine.succeed("echo -n supersecret | cryptsetup luksFormat -q --iter-time=1 /dev/vdc -")
      machine.succeed("echo -n supersecret | cryptsetup luksFormat -q --iter-time=1 /dev/vdd -")
  
      # Boot from the encrypted disk
      machine.succeed("bootctl set-default nixos-generation-1-specialisation-boot-luks.conf")
  
negative.code:     machine.wait_for_unit("multi-user.target")
  
      assert "/dev/mapper/cryptroot on / type ext4" in machine.succeed("mount")
      assert "/dev/mapper/cryptroot2 on /cryptroot2 type ext4" in machine.succeed("mount")
    '';
  })
  