1
Files
dotfiles/hosts/default/secureboot.nix
2024-12-20 10:20:11 +05:30

22 lines
252 B
Nix

{
config,
pkgs,
lib,
...
}:
{
boot = {
loader = {
systemd-boot.enable = lib.mkForce false;
# efi.canTouchEfiVariables = true;
};
lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
};
}