lanzabote

This commit is contained in:
Lennart J. Kurzweg (Nx2)
2024-05-02 00:10:49 +02:00
parent 4f799dbf20
commit 8e7b9456f5
3 changed files with 269 additions and 24 deletions

View File

@@ -9,6 +9,11 @@
});
in
{
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
config = if host == "NxXPS" then {
boot.loader.efi.canTouchEfiVariables = true;
boot.loader.grub = {
@@ -34,32 +39,30 @@
'';
};
} else {
boot.loader = {
systemd-boot = {
enable = true;
configurationLimit = 10;
};
timeout = 30;
};
# boot.loader = {
# systemd-boot = {
# enable = true;
# configurationLimit = 10;
# };
# timeout = 30;
# };
# I have to boot with secureboot becasue of the chineese spyware called Vanguard
# imports = [
# inputs.lanzaboote.nixosModules.lanzaboote
# ];
# environment.systemPackages = with pkgs; [
# sbctl
# ];
# boot = {
# lanzaboote = {
# enable = true;
# pkiBundle = "/etc/secureboot";
# };
# # we let lanzaboote install systemd-boot
# loader.systemd-boot.enable = false;
# };
environment.systemPackages = with pkgs; [
sbctl
];
boot = {
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
# we let lanzaboote install systemd-boot
loader.systemd-boot.enable = false;
};
};
}
}