We can't do that because secure boot is on...

This commit is contained in:
Lillian Violet 2024-09-11 14:18:22 +02:00
parent 5f43f81d51
commit 40f0c218d9
2 changed files with 6 additions and 6 deletions

View file

@ -213,7 +213,7 @@
# > Our main nixos configuration file <
./nixos/hosts/shodan/configuration.nix
sops-nix.nixosModules.sops
#lanzaboote.nixosModules.lanzaboote
lanzaboote.nixosModules.lanzaboote
disko.nixosModules.disko
jovian.nixosModules.jovian
home-manager.nixosModules.home-manager

View file

@ -207,13 +207,13 @@
# This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false
# for now.
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.initrd.systemd.enable = true;
#boot.lanzaboote = {
# enable = true;
# pkiBundle = "/etc/secureboot";
#};
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
boot.loader.systemd-boot.configurationLimit = 3;
boot.loader.timeout = 0;
boot.loader.efi.canTouchEfiVariables = true;