diff options
Diffstat (limited to 'hosts/toaster')
| -rw-r--r-- | hosts/toaster/default.nix | 1 | ||||
| -rw-r--r-- | hosts/toaster/secure-boot.nix | 12 |
2 files changed, 13 insertions, 0 deletions
diff --git a/hosts/toaster/default.nix b/hosts/toaster/default.nix index 6aaa4bc..e7ff5b9 100644 --- a/hosts/toaster/default.nix +++ b/hosts/toaster/default.nix @@ -6,6 +6,7 @@ ./network-vpns.nix ./network.nix ./secrets.nix + ./secure-boot.nix ./zfs.nix ]; diff --git a/hosts/toaster/secure-boot.nix b/hosts/toaster/secure-boot.nix new file mode 100644 index 0000000..d18e1cb --- /dev/null +++ b/hosts/toaster/secure-boot.nix @@ -0,0 +1,12 @@ +{ pkgs, lib, ... }: { + boot = { + bootspec.enable = true; + loader.systemd-boot.enable = lib.mkForce false; + lanzaboote = { + enable = true; + pkiBundle = "/etc/secureboot"; + }; + }; + + environment.systemPackages = [ pkgs.sbctl ]; +} |