blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add secure boot support

Browse Source
This commit is contained in:
blake
2025-11-11 15:55:18 -06:00
parent f7ece5059d
commit 2ea0b96230
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/system/secure_boot/default.nix
View File

@@ -23,6 +23,8 @@ in {
# force disable systemd-boot so lanzaboote can be used # force disable systemd-boot so lanzaboote can be used
boot.loader.systemd-boot.enable = lib.mkForce false; boot.loader.systemd-boot.enable = lib.mkForce false;
# make sure the keys are generated and in the pkiBundle path
# with `nix-shell -p --run "sbctl create-keys"`
boot.lanzaboote = { boot.lanzaboote = {
enable = true; enable = true;
pkiBundle = "/var/lib/sbctl"; pkiBundle = "/var/lib/sbctl";