Enable lanzaboote on julius-framework
This commit is contained in:
parent
7d45fe1534
commit
87166601cd
2 changed files with 6 additions and 2 deletions
|
|
@ -96,6 +96,7 @@
|
||||||
modules = [
|
modules = [
|
||||||
nixos-hardware.nixosModules.framework-11th-gen-intel
|
nixos-hardware.nixosModules.framework-11th-gen-intel
|
||||||
auto-cpufreq.nixosModules.default
|
auto-cpufreq.nixosModules.default
|
||||||
|
lanzaboote.nixosModules.lanzaboote
|
||||||
./hosts/julius-framework
|
./hosts/julius-framework
|
||||||
./users/julius/nixos.nix
|
./users/julius/nixos.nix
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -75,10 +75,13 @@
|
||||||
loader = {
|
loader = {
|
||||||
efi.canTouchEfiVariables = true;
|
efi.canTouchEfiVariables = true;
|
||||||
systemd-boot = {
|
systemd-boot = {
|
||||||
enable = true;
|
enable = false; # Enabled by lanzaboote
|
||||||
editor = false;
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
lanzaboote = {
|
||||||
|
enable = true;
|
||||||
|
pkiBundle = "/var/lib/sbctl";
|
||||||
|
};
|
||||||
initrd = {
|
initrd = {
|
||||||
systemd.enable = true;
|
systemd.enable = true;
|
||||||
luks.devices = {
|
luks.devices = {
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue