albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Testing SecureBoot

Browse source
This commit is contained in:
iFargle 2023-06-30 19:57:39 +09:00
parent 71b700bf7f
commit 618424c145
2 changed files with 13 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
laptop/configuration.nix
View file

@ -41,7 +41,11 @@
boot.plymouth.enable = true; boot.plymouth.enable = true;
boot.initrd.systemd.enable = true; boot.initrd.systemd.enable = true;
boot.kernelParams = ["quiet"]; boot.kernelParams = ["quiet"];
# SecureBoot
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote.enable = true;
pkiBundle = "/etc/secureboot";
# Setup keyfile # Setup keyfile
boot.initrd.secrets = { boot.initrd.secrets = {
"/crypto_keyfile.bin" = null; "/crypto_keyfile.bin" = null;

9
laptop/flake.nix
View file

@ -8,10 +8,16 @@
# Manage dotfiles in a home directory # Manage dotfiles in a home directory
home-manager.url = "github:nix-community/home-manager/release-23.05"; home-manager.url = "github:nix-community/home-manager/release-23.05";
home-manager.inputs.nixpkgs.follows = "nixpkgs"; home-manager.inputs.nixpkgs.follows = "nixpkgs";
# Secureboot Configuration
lanzaboote.url = "github:nix-community/lanzaboote";
lanzaboote.inputs.nixpkgs.follows = "nixpkgs";
}; };
outputs = { nixpkgs, home-manager, ... }: outputs = { nixpkgs, home-manager, lanzaboote, ... }:
let let
# Secureboot Configuration
system = "x86_64-linux"; system = "x86_64-linux";
pkgs = import nixpkgs { pkgs = import nixpkgs {
# Tells Flake what OS version we are using # Tells Flake what OS version we are using
@ -28,6 +34,7 @@
modules = [ modules = [
./configuration.nix ./configuration.nix
./hardware-configuration.nix ./hardware-configuration.nix
lanzaboote.nixosModules.lanzaboote
]; ];
}; };
}; };