Secureboot stuff

2025-06-10 15:24:04 -04:00
parent f2b4c60bad
commit d2608f594e
2 changed files with 186 additions and 14 deletions
--- a/hosts/anzu/configuration.nix
+++ b/hosts/anzu/configuration.nix
@@ -1,5 +1,6 @@
 {
  config,
+  lib,
  pkgs,
  ...
 }: {
@@ -29,5 +30,11 @@
    #in ["${automount_opts},credentials=/etc/nixos/smb-secrets,uid=1000,gid=100"];
  };

+  boot.loader.systemd-boot.enable = lib.mkForce false;
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
  system.stateVersion = "24.11";
 }