stitchy/dotfiles
1
0
Fork 1
Code Issues 2 Pull requests Activity

feat: secure boot enabled on lappy

Browse source
This commit is contained in:
stitchy 2025-07-31 17:20:28 -07:00
parent b0881d9244
commit fa3624655d
Signed by: stitchy
SSH key fingerprint: SHA256:yz2SoxdnY67tfY5Jzb0f2v8f5W3o/IF359kbcquWip8
3 changed files with 180 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
hosts/lappy/default.nix
View file

@ -36,6 +36,13 @@
"kernel.yama.ptrace_scope=0"
];
# Secure Boot
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
boot.loader.systemd-boot.enable = lib.mkForce false;
virtualisation = {
docker.enable = true;
libvirtd.enable = true;