From 6e9933ef801c6e4b804f0f8dc6cc0735cb9daec1 Mon Sep 17 00:00:00 2001 From: makefu <github@syntax-fehler.de> Date: Thu, 17 Aug 2023 20:12:02 +0200 Subject: [PATCH] x: use lanzaboote --- 1systems/x/x13/default.nix | 1 + 1systems/x/x13/secureboot.nix | 2 ++ 2 files changed, 3 insertions(+) diff --git a/1systems/x/x13/default.nix b/1systems/x/x13/default.nix index baa37a3..a1f3aab 100644 --- a/1systems/x/x13/default.nix +++ b/1systems/x/x13/default.nix @@ -10,6 +10,7 @@ ../../../2configs/hw/bluetooth.nix ../../../2configs/hw/tpm.nix ../../../2configs/hw/ssd.nix + ./secureboot.nix # ../../../2configs/hw/xmm7360.nix nixos-hardware.nixosModules.lenovo-thinkpad-l14-amd ]; diff --git a/1systems/x/x13/secureboot.nix b/1systems/x/x13/secureboot.nix index b1f1104..1810f4e 100644 --- a/1systems/x/x13/secureboot.nix +++ b/1systems/x/x13/secureboot.nix @@ -1,4 +1,6 @@ +{pkgs,lib, ... }: { + environment.systemPackages = [ pkgs.sbctl ]; boot.loader.systemd-boot.enable = lib.mkForce false; boot.lanzaboote = { enable = true;