set up lanzaboot and update the EDI disko setup

This commit is contained in:
Lillian Violet 2024-02-15 14:27:03 +01:00
parent e37d49f05f
commit 54589eb953
3 changed files with 42 additions and 39 deletions

View file

@ -24,7 +24,7 @@
../../desktop
../../../disko/EDI
../../../disko/EDI/lvm.nix
# Import your generated (nixos-generate-config) hardware configuration
./hardware-configuration.nix
@ -41,6 +41,7 @@
environment.systemPackages = with pkgs; [
podman
podman-compose
sbctl
];
virtualisation.podman = {
@ -53,13 +54,25 @@
boot.bootspec.enable = true;
boot.kernelPackages = pkgs.linuxPackages_latest;
boot.supportedFilesystems = ["bcachefs"];
boot = {
loader.systemd-boot.enable = lib.mkForce false;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
# Lanzaboote currently replaces the systemd-boot module.
# This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false
# for now.
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
#boot = {
#loader.systemd-boot.enable = lib.mkForce false;
#lanzaboote = {
#enable = true;
#pkiBundle = "/etc/secureboot";
#};
#};
# Enable bluetooth hardware
hardware.bluetooth.enable = true;