Files
dotfiles/modules/core/secure-boot.nix
T
2025-11-05 02:13:02 +09:00

17 lines
323 B
Nix

{ inputs, pkgs, lib, ... }:
{
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
boot.loader = {
systemd-boot.enable = lib.mkForce false;
efi.canTouchEfiVariables = true;
efi.efiSysMountPoint = "/boot";
};
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
}