Add secureboot stuff

This commit is contained in:
2025-06-10 15:10:43 -04:00
parent 9cdee2278d
commit f2b4c60bad
3 changed files with 21 additions and 11 deletions

View File

@@ -1,15 +1,26 @@
{ {
description = "A simple NixOS flake"; description = "SecureBoot-enabled NixOS config";
inputs = { inputs = {
# NixOS official package source, using unstable here
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable"; nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
nixpkgs-stable.url = "github:NixOS/nixpkgs/nixos-25.05";
home-manager = {
url = "github:nix-community/home-manager/master";
inputs.nixpkgs.follows = "nixpkgs";
};
home-manager-stable = {
url = "github:nix-community/home-manager/release-25.05";
inputs.nixpkgs.follows = "nixpkgs-stable";
};
nur = { nur = {
url = "github:nix-community/NUR"; url = "github:nix-community/NUR";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
home-manager = {
url = "github:nix-community/home-manager/master"; lanzaboote = {
url = "github:nix-community/lanzaboote/v0.4.2";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
sops-nix = { sops-nix = {
@@ -17,12 +28,6 @@
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
nixpkgs-stable.url = "github:NixOS/nixpkgs/nixos-25.05";
home-manager-stable = {
url = "github:nix-community/home-manager/release-25.05";
inputs.nixpkgs.follows = "nixpkgs-stable";
};
catppuccin.url = "github:catppuccin/nix"; catppuccin.url = "github:catppuccin/nix";
hyprland.url = "github:hyprwm/Hyprland"; hyprland.url = "github:hyprwm/Hyprland";
plasma-manager = { plasma-manager = {
@@ -35,6 +40,7 @@
outputs = { outputs = {
self, self,
catppuccin, catppuccin,
lanzaboote,
nur, nur,
plasma-manager, plasma-manager,
sops-nix, sops-nix,
@@ -107,7 +113,7 @@
host = hosts.anzu; host = hosts.anzu;
nixpkgs = inputs.nixpkgs; nixpkgs = inputs.nixpkgs;
home-manager = inputs.home-manager; home-manager = inputs.home-manager;
modules = []; modules = [lanzaboote.nixosModules.lanzaboote];
}; };
ichigo = mkNixOSConfigurations { ichigo = mkNixOSConfigurations {
host = hosts.ichigo; host = hosts.ichigo;

View File

@@ -51,6 +51,7 @@
brightnessctl brightnessctl
helvum helvum
]; ];
services.hyprpolkitagent.enable = true; services.hyprpolkitagent.enable = true;
services.hyprsunset.enable = true; services.hyprsunset.enable = true;
@@ -63,6 +64,8 @@
}; };
}; };
services.network-manager-applet.enable = true;
wayland.windowManager.hyprland = { wayland.windowManager.hyprland = {
enable = false; enable = false;
package = null; package = null;

View File

@@ -162,6 +162,7 @@
python3 python3
qemu qemu
rustup rustup
sbctl
usbutils usbutils
wget wget
yubikey-manager yubikey-manager