mirror of
https://github.com/Moe1369/nix-fleet.git
synced 2026-04-24 23:59:07 +02:00
add lanzaboote
This commit is contained in:
@@ -1,7 +1,16 @@
|
|||||||
{ ... }: {
|
{ inputs, ... }: {
|
||||||
flake.nixosModules.secure-boot = { pkgs, ... }: {
|
flake.nixosModules.secure-boot = { pkgs, lib, ... }: {
|
||||||
environment.systemPackages = with pkgs; [
|
imports = [
|
||||||
sbctl
|
inputs.lanzaboote.nixosModules.lanzaboote
|
||||||
];
|
];
|
||||||
|
|
||||||
|
environment.systemPackages = [ pkgs.sbctl ];
|
||||||
|
|
||||||
|
boot.loader.systemd-boot.enable = lib.mkForce false;
|
||||||
|
|
||||||
|
boot.lanzaboote = {
|
||||||
|
enable = true;
|
||||||
|
pkiBundle = "/var/lib/sbctl";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user