diff options
| author | Leander Scherer <leander@schererleander.de> | 2026-07-02 13:40:14 +0200 |
|---|---|---|
| committer | Leander Scherer <leander@schererleander.de> | 2026-07-02 13:40:14 +0200 |
| commit | a86bd1a7f487297958ac9ec3e38285ec014f96bf (patch) | |
| tree | e125ec2029e355be214e5bf28ff2669d87ab6a53 /modules/hosts/adam | |
| parent | 67ab10c7ddaecf63cf8a82af17144d7024b4cb21 (diff) | |
feat(adam): setup secure boot with lanzaboote
Diffstat (limited to 'modules/hosts/adam')
| -rw-r--r-- | modules/hosts/adam/configuration.nix | 10 | ||||
| -rw-r--r-- | modules/hosts/adam/flake-parts.nix | 8 |
2 files changed, 11 insertions, 7 deletions
diff --git a/modules/hosts/adam/configuration.nix b/modules/hosts/adam/configuration.nix index 8e134f2..85a352f 100644 --- a/modules/hosts/adam/configuration.nix +++ b/modules/hosts/adam/configuration.nix @@ -11,9 +11,13 @@ kernelModules = [ "amdgpu" ]; loader = { timeout = 0; - systemd-boot.enable = true; + systemd-boot.enable = pkgs.lib.mkForce false; efi.canTouchEfiVariables = true; }; + lanzaboote = { + enable = true; + pkiBundle = "/var/lib/sbctl"; + }; }; # Disable waiting for network to be online @@ -38,6 +42,10 @@ ]; }; + environment.systemPackages = [ + pkgs.sbctl + ]; + nix.settings.experimental-features = [ "nix-command" "flakes" diff --git a/modules/hosts/adam/flake-parts.nix b/modules/hosts/adam/flake-parts.nix index aa6d8b9..800ca80 100644 --- a/modules/hosts/adam/flake-parts.nix +++ b/modules/hosts/adam/flake-parts.nix @@ -3,12 +3,8 @@ flake.nixosConfigurations."adam" = inputs.nixpkgs.lib.nixosSystem { specialArgs = { inherit inputs; }; modules = with inputs.self.modules.nixos; [ - { - nixpkgs.overlays = [ - inputs.self.overlays.ida-pro - inputs.self.overlays.ida-pro-mcp - ]; - } + inputs.self.modules.nixos.nixpkgs + inputs.lanzaboote.nixosModules.lanzaboote adam ida-pro home-manager |