diff options
| author | Leander Scherer <leander@schererleander.de> | 2026-07-02 13:40:14 +0200 |
|---|---|---|
| committer | Leander Scherer <leander@schererleander.de> | 2026-07-02 13:40:14 +0200 |
| commit | a86bd1a7f487297958ac9ec3e38285ec014f96bf (patch) | |
| tree | e125ec2029e355be214e5bf28ff2669d87ab6a53 /modules/hosts/adam/configuration.nix | |
| parent | 67ab10c7ddaecf63cf8a82af17144d7024b4cb21 (diff) | |
feat(adam): setup secure boot with lanzaboote
Diffstat (limited to 'modules/hosts/adam/configuration.nix')
| -rw-r--r-- | modules/hosts/adam/configuration.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/modules/hosts/adam/configuration.nix b/modules/hosts/adam/configuration.nix index 8e134f2..85a352f 100644 --- a/modules/hosts/adam/configuration.nix +++ b/modules/hosts/adam/configuration.nix @@ -11,9 +11,13 @@ kernelModules = [ "amdgpu" ]; loader = { timeout = 0; - systemd-boot.enable = true; + systemd-boot.enable = pkgs.lib.mkForce false; efi.canTouchEfiVariables = true; }; + lanzaboote = { + enable = true; + pkiBundle = "/var/lib/sbctl"; + }; }; # Disable waiting for network to be online @@ -38,6 +42,10 @@ ]; }; + environment.systemPackages = [ + pkgs.sbctl + ]; + nix.settings.experimental-features = [ "nix-command" "flakes" |