flake/modules/profiles/secureboot.nix

17 lines
282 B
Nix
Raw Normal View History

{
2024-10-29 08:55:56 +01:00
config,
pkgs,
lib,
...
}: {
environment.systemPackages = [
# For debugging and troubleshooting Secure Boot.
pkgs.sbctl
];
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
2024-10-29 08:55:56 +01:00
}