Enable lanzaboote on julius-framework

This commit is contained in:
JuliusFreudenberger 2026-06-14 01:09:03 +02:00
parent 7d45fe1534
commit 87166601cd
2 changed files with 6 additions and 2 deletions

View file

@ -96,6 +96,7 @@
modules = [ modules = [
nixos-hardware.nixosModules.framework-11th-gen-intel nixos-hardware.nixosModules.framework-11th-gen-intel
auto-cpufreq.nixosModules.default auto-cpufreq.nixosModules.default
lanzaboote.nixosModules.lanzaboote
./hosts/julius-framework ./hosts/julius-framework
./users/julius/nixos.nix ./users/julius/nixos.nix

View file

@ -75,10 +75,13 @@
loader = { loader = {
efi.canTouchEfiVariables = true; efi.canTouchEfiVariables = true;
systemd-boot = { systemd-boot = {
enable = true; enable = false; # Enabled by lanzaboote
editor = false;
}; };
}; };
lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
initrd = { initrd = {
systemd.enable = true; systemd.enable = true;
luks.devices = { luks.devices = {