schmittlauch/nixconfigs
2
0
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity

enable secure boot wit Lanzaboote

Browse source
This commit is contained in:
Trolli Schmittlauch 2023-08-17 17:26:57 +02:00
parent c1d12186f2
commit 072fc2b6af
3 changed files with 263 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

17
nixos/configuration.nix
View file

@ -39,10 +39,23 @@ in
};
boot.kernel.sysctl."vm.swappiness" = 9;
# Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
# UEFI secure boot
environment.systemPackages = [
pkgs.sbctl
];
# Lanzaboote currently replaces the systemd-boot module.
# This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false
# for now.
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
# make the boot look good
boot.plymouth.enable = true;