Files
dotfiles/system-modules/boot.nix
Lennart J. Kurzweg (Nx2) 8e7b9456f5 lanzabote
2024-05-02 00:10:49 +02:00

69 lines
1.6 KiB
Nix

{ config, pkgs, host, inputs, ... }:
let
grub-theme-ascii-diana = (pkgs.fetchFromGitea {
domain = "git.nx2.site";
owner = "nx2";
repo = "grub-theme-ascii-diana";
rev = "0.5.0";
hash = "sha256-e+55NYsSsWY6GPbYUtdVEB9krueuCAWT3Ce/Ghops1g=";
});
in
{
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
config = if host == "NxXPS" then {
boot.loader.efi.canTouchEfiVariables = true;
boot.loader.grub = {
enable = true;
configurationLimit = 30;
# device = "/dev/nvme0n1p1";
device = "nodev";
# useOSProber = true;
efiSupport = true;
# theme = pkgs.sleek-grub-theme;
theme = grub-theme-ascii-diana;
font = "${grub-theme-ascii-diana}/unicode.pf2";
fontSize = 50;
splashImage = null;
extraEntries = ''
menuentry 'Windows 11' --class windows --class os $menuentry_id_option 'osprober-efi-0A97-7A2D' {
insmod part_gpt
insmod fat
search --no-floppy --fs-uuid --set=root 0A97-7A2D
chainloader /EFI/Microsoft/Boot/bootmgfw.efi
}
'';
};
} else {
# boot.loader = {
# systemd-boot = {
# enable = true;
# configurationLimit = 10;
# };
# timeout = 30;
# };
# I have to boot with secureboot becasue of the chineese spyware called Vanguard
environment.systemPackages = with pkgs; [
sbctl
];
boot = {
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
# we let lanzaboote install systemd-boot
loader.systemd-boot.enable = false;
};
};
}