florian.richer/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

perso-desktop: Enable secure boot
All checks were successful
check / check (push) Successful in 33s
Details

Browse source
This commit is contained in:
Florian RICHER 2025-01-03 23:51:19 +01:00
parent a50b68be50
commit cce1f72410
Signed by: florian.richer
GPG key ID: C73D37CBED7BFC77
4 changed files with 232 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

17
hosts/perso-desktop/configuration.nix
View file

@ -2,7 +2,7 @@
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ ... }:
{ lib, ... }:
{
imports =
@ -14,13 +14,16 @@
];
# Bootloader.
boot.loader.systemd-boot = {
# For lanzaboote see https://github.com/nix-community/lanzaboote/blob/master/docs/QUICK_START.md
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
windows = {
"11-pro" = {
title = "Windows 11 Pro";
efiDeviceHandle = "HD1b";
};
pkiBundle = "/var/lib/sbctl";
};
boot.loader.systemd-boot.windows = {
"11-pro" = {
title = "Windows 11 Pro";
efiDeviceHandle = "HD1b";
};
};
boot.loader.efi.canTouchEfiVariables = true;