encode42.dev
Personal-use NixOS configuration
1# note: make sure to create secureboot keys before installation.
2# https://github.com/nix-community/lanzaboote/blob/b2f781751764ff57d54f7cf1910ae1bbf268ed1c/docs/QUICK_START.md
3
4{
5 lib,
6 lanzaboote,
7 pkgs,
8 ...
9}:
10
11{
12 imports = [
13 lanzaboote.nixosModules.lanzaboote
14
15 ./common.nix
16 ];
17
18 boot = {
19 loader.systemd-boot.enable = lib.mkForce false;
20
21 lanzaboote = {
22 enable = true;
23
24 pkiBundle = "/var/lib/sbctl";
25 };
26 };
27
28 environment.systemPackages = with pkgs; [
29 sbctl
30 ];
31}