alyraffauf/nixcfg
1
0
Fork 0
mirror of https://github.com/alyraffauf/nixcfg.git synced 2024-11-25 08:11:54 -05:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity

petalburg: enable lanzaboote

Browse source
This commit is contained in:
Aly Raffauf 2024-08-24 12:27:47 -04:00
parent f8c4a4e207
commit 85969849ea
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
hosts/petalburg/default.nix
View file

@ -1,6 +1,7 @@
# Lenovo Yoga 9i Convertible with Intel Core i7-1360P, 16GB RAM, 512GB SSD.
{
config,
lib,
self,
...
}: {
@ -9,6 +10,7 @@
./home.nix
./secrets.nix
./stylix.nix
self.inputs.lanzaboote.nixosModules.lanzaboote
self.inputs.nixhw.nixosModules.lenovo-yoga-9i-intel-13th
self.nixosModules.common-auto-upgrade
self.nixosModules.common-base
@ -22,11 +24,17 @@
];
boot = {
initrd.systemd.enable = true;
extraModulePackages = with config.boot.kernelPackages; [acpi_call];
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
loader = {
efi.canTouchEfiVariables = true;
systemd-boot.enable = true;
systemd-boot.enable = lib.mkForce false;
};
};