1
0
Fork 0
This commit is contained in:
Lukas Wurzinger 2025-03-26 16:12:29 +00:00
parent 7061c52ef6
commit 2828cef769
No known key found for this signature in database
3 changed files with 75 additions and 18 deletions

View file

@ -1,28 +1,28 @@
{
config,
lib,
inputs,
pkgs,
# inputs,
# pkgs,
...
}: let
cfg = config.setups.secureBoot;
in {
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
# imports = [
# inputs.lanzaboote.nixosModules.lanzaboote
# ];
options.setups.secureBoot.enable = lib.mkEnableOption "Secure Boot";
config = lib.mkIf cfg.enable {
environment.systemPackages = [
pkgs.sbctl
];
# environment.systemPackages = [
# pkgs.sbctl
# ];
boot.loader.systemd-boot.enable = lib.mkForce false;
# boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = lib.mkForce true;
pkiBundle = lib.mkDefault "/var/lib/sbctl";
};
# boot.lanzaboote = {
# enable = lib.mkForce true;
# pkiBundle = lib.mkDefault "/var/lib/sbctl";
# };
};
}