Files
dotfiles/modules/nix/secure-boot.nix
T
2026-05-28 18:37:32 +09:00

22 lines
320 B
Nix

{
inputs,
lib,
...
}:
{
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
boot.loader = {
systemd-boot.enable = lib.mkForce false;
efi.canTouchEfiVariables = true;
efi.efiSysMountPoint = "/boot";
};
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
}