youwen/liminalOS
1
0
Fork 0
mirror of https://github.com/youwen5/liminalOS.git synced 2025-06-19 21:49:52 -07:00
Code Issues Projects Releases Packages Wiki Activity

feat: enable secure boot

Browse source
This commit is contained in:
Youwen Wu 2024-07-12 15:21:32 -07:00
parent abc526800f
commit bccd5d08ce
Signed by: youwen
GPG key ID: 865658ED1FE61EC3
2 changed files with 236 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

29
flake.nix
View file

@ -10,17 +10,42 @@
hyprland.url = "git+https://github.com/hyprwm/Hyprland?submodules=1";
catppuccin.url = "github:catppuccin/nix";
zimfw.url = "github:joedevivo/zimfw.nix";
lanzaboote = {
url = "github:nix-community/lanzaboote/v0.4.1";
# Optional but recommended to limit the size of your system closure.
inputs.nixpkgs.follows = "nixpkgs";
};
};
outputs = { self, nixpkgs, home-manager, catppuccin, zimfw, ... }@inputs: {
outputs = { self, nixpkgs, home-manager, catppuccin, zimfw, lanzaboote, ... }@inputs: {
nixosConfigurations.nixos = nixpkgs.lib.nixosSystem {
specialArgs = { inherit inputs; };
system = "x86_64-linux";
modules = [
./configuration.nix
catppuccin.nixosModules.catppuccin
lanzaboote.nixosModules.lanzaboote
({ pkgs, lib, ... }: {
environment.systemPackages = [
# For debugging and troubleshooting Secure Boot.
pkgs.sbctl
];
# Lanzaboote currently replaces the systemd-boot module.
# This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false
# for now.
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
})
home-manager.nixosModules.home-manager
{
home-manager.useGlobalPkgs = true;