nix-config/hosts/toaster/secure-boot.nix

13 lines
252 B
Nix
Raw Normal View History

2023-04-23 01:03:53 +02:00
{ pkgs, lib, ... }: {
boot = {
bootspec.enable = true;
loader.systemd-boot.enable = lib.mkForce false;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
};
environment.systemPackages = [ pkgs.sbctl ];
}