Enable lanzaboote on julius-framework

This commit is contained in:
JuliusFreudenberger 2026-06-14 01:09:03 +02:00
parent 7d45fe1534
commit 87166601cd
2 changed files with 6 additions and 2 deletions

View file

@ -96,6 +96,7 @@
modules = [
nixos-hardware.nixosModules.framework-11th-gen-intel
auto-cpufreq.nixosModules.default
lanzaboote.nixosModules.lanzaboote
./hosts/julius-framework
./users/julius/nixos.nix

View file

@ -75,10 +75,13 @@
loader = {
efi.canTouchEfiVariables = true;
systemd-boot = {
enable = true;
editor = false;
enable = false; # Enabled by lanzaboote
};
};
lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
initrd = {
systemd.enable = true;
luks.devices = {