0xa/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

first stab at secure boot

Browse source
This commit is contained in:
Grigory Shipunov 2023-04-23 01:03:53 +02:00
parent ad9ced3250
commit 7e815dd5d0
Signed by: 0xa
GPG key ID: 91FA5E5BF9AA901C
4 changed files with 263 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/toaster/default.nix
View file

@ -6,6 +6,7 @@
./network-vpns.nix
./network.nix
./secrets.nix
./secure-boot.nix
./zfs.nix
];

12
hosts/toaster/secure-boot.nix Normal file
View file

@ -0,0 +1,12 @@
{ pkgs, lib, ... }: {
boot = {
bootspec.enable = true;
loader.systemd-boot.enable = lib.mkForce false;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
};
environment.systemPackages = [ pkgs.sbctl ];
}