nas secureboot

2025-03-23 13:17:46 -05:00
parent 0561e80635
commit 91f2eb1296
1 changed files with 10 additions and 1 deletions
--- a/hosts/nas/boot.nix
+++ b/hosts/nas/boot.nix
@@ -9,7 +9,7 @@ in
    kernelModules = [ "nct6775" ];
    loader = {
      systemd-boot = {
-        enable = true;
+        enable = false;
        configurationLimit = configLimit;
      };

@@ -17,6 +17,15 @@ in
        canTouchEfiVariables = true;
        efiSysMountPoint = "/boot";
      };
+
+      lanzaboote = {
+        enable = true;
+        pkiBundle = "/etc/secureboot";
+        settings = {
+          console-mode = "max";
+        };
+        configurationLimit = configLimit;
+      };
    };

    kernel.sysctl = {