lanzaboote to limine

This commit is contained in:
nyxerinys 2026-10-02 19:19:50 -05:00
parent 59e227dbf4
commit d3756ee646
2 changed files with 20 additions and 16 deletions

View file

@ -1,20 +1,28 @@
{ inputs, lib, pkgs, ... }:
{
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
boot = {
lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
autoGenerateKeys.enable = true;
autoEnrollKeys.enable = true;
loader = {
efi.canTouchEfiVariables = true;
grub.enable = lib.mkForce false;
systemd-boot.enable = lib.mkForce false;
limine = {
enable = true;
resolution = "3840x1080";
enableEditor = true;
maxGenerations = 11;
secureBoot = {
enable = true;
autoGenerateKeys = true;
autoEnrollKeys.enable = true;
};
extraEntries = ''
/Windows
protocol: efi
path: boot():/EFI/Microsoft/Boot/bootmgfw.efi
'';
};
};
loader.efi.canTouchEfiVariables = true;
loader.grub.enable = lib.mkForce false;
loader.systemd-boot.enable = lib.mkForce false;
};
environment.systemPackages = [ pkgs.sbctl ];