Added secure boot

This commit is contained in:
Alexandre 2026-03-01 12:08:27 +01:00
parent a278c49f32
commit 445856d98a
5 changed files with 19 additions and 0 deletions

View File

@ -6,6 +6,11 @@
nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable"; nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
nixos-hardware.url = "github:NixOS/nixos-hardware/master"; nixos-hardware.url = "github:NixOS/nixos-hardware/master";
lanzaboote = {
url = "github:nix-community/lanzaboote/master";
inputs.nixpkgs.follows = "nixpkgs";
};
# Hyprland # Hyprland
hyprland = { hyprland = {

View File

@ -6,6 +6,7 @@ in
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
inputs.sops-nix.nixosModules.sops inputs.sops-nix.nixosModules.sops
modules.nixos.secureboot
modules.common.module modules.common.module
modules.nixos.secrets modules.nixos.secrets
modules.nixos.gaming.amd modules.nixos.gaming.amd

View File

@ -21,6 +21,7 @@
gnupg gnupg
cmatrix cmatrix
gh gh
sbctl
# Browser # Browser
inputs.zen-browser.packages.${pkgs.stdenv.hostPlatform.system}.default inputs.zen-browser.packages.${pkgs.stdenv.hostPlatform.system}.default
]; ];

View File

@ -37,6 +37,7 @@
}; };
bootloader = ./nixos/bootloader.nix; bootloader = ./nixos/bootloader.nix;
secureboot = ./nixos/secureboot.nix;
locale = ./nixos/locale.nix; locale = ./nixos/locale.nix;
secrets = ./nixos/secrets.nix; secrets = ./nixos/secrets.nix;
swap = ./nixos/swap.nix; swap = ./nixos/swap.nix;

View File

@ -0,0 +1,11 @@
{ pkgs, lib, ...}:
{
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
}