nixfiles/nixos/profiles/secureboot.nix
2024-04-06 11:21:36 -07:00

16 lines
286 B
Nix

{pkgs, lib, ...}: let
inherit (lib.modules) mkForce;
in {
environment.systemPackages = with pkgs; [
sbctl
];
boot = {
loader = {
systemd-boot.enable = mkForce false;
};
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
};
}