lightly-toasted/nix-config
1
0
Fork 0
mirror of https://github.com/lightly-toasted/nix-config.git synced 2025-10-04 07:25:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: add lanzaboote

Browse source 
- Added lanzaboote
- Disabled systemd-boot in favor of lanzaboote
- Added sbctl
This commit is contained in:
lightly-toasted 2025-08-28 22:37:42 +09:00
parent dfc4f9ba9d
commit b738736f94
5 changed files with 182 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/nixos/configuration.nix
View file

@ -5,6 +5,7 @@
[
inputs.nix-flatpak.nixosModules.nix-flatpak
inputs.sops-nix.nixosModules.sops
inputs.lanzaboote.nixosModules.lanzaboote
./hardware-configuration.nix
] ++ (
let

9
hosts/nixos/modules/boot.nix
View file

@ -1,7 +1,12 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
{
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.loader.efi.canTouchEfiVariables = true;
boot.supportedFilesystems = [ "ntfs" ];
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
}

1
hosts/nixos/modules/packages.nix
View file

@ -4,6 +4,7 @@
environment.systemPackages = with pkgs; [
vim
wget
sbctl
];
nixpkgs.config.allowUnfree = true;
}