testing lanzaboote

2024-06-30 10:38:14 +02:00
parent 06c3442ea3
commit ca9d5f5f79
5 changed files with 236 additions and 2 deletions
--- a/hosts/cnix/default.nix
+++ b/hosts/cnix/default.nix
@@ -69,9 +69,13 @@ in {

  # Bootloader
  boot.loader = {
-    systemd-boot.enable = true;
+    systemd-boot.enable = lib.mkForce false;
    efi.canTouchEfiVariables = true;
  };
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/etc/secureboot";
+  };
  # Enable networking
  networking = {
    networkmanager.enable = true;