nixcfg/common/lanzaboote.nix

16 lines
260 B
Nix
Raw Normal View History

{lib, ...}: {
boot = {
initrd.systemd.enable = true;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
loader = {
efi.canTouchEfiVariables = true;
systemd-boot.enable = lib.mkForce false;
};
};
}