NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

lanzaboote to limine

Browse source
This commit is contained in:
nyxerinys 2026-10-02 19:19:50 -05:00
parent 59e227dbf4
commit d3756ee646
2 changed files with 20 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

4
flake.nix
View file

@ -38,10 +38,6 @@
url = "git+ssh://git@git.nyxerinys.dev:222/nyxerinys/nix-secrets"; url = "git+ssh://git@git.nyxerinys.dev:222/nyxerinys/nix-secrets";
flake = false; flake = false;
}; };
lanzaboote = {
url = "github:nix-community/lanzaboote/v1.2.0";
inputs.nixpkgs.follows = "nixpkgs";
};
}; };
outputs = { self, nixpkgs, nix-darwin, home-manager, ... } @ inputs: outputs = { self, nixpkgs, nix-darwin, home-manager, ... } @ inputs:

28
hosts/apollo/boot/bootloader.nix
View file

@ -1,20 +1,28 @@
{ inputs, lib, pkgs, ... }: { inputs, lib, pkgs, ... }:
{ {
imports = [
inputs.lanzaboote.nixosModules.lanzaboote
];
boot = { boot = {
lanzaboote = { loader = {
efi.canTouchEfiVariables = true;
grub.enable = lib.mkForce false;
systemd-boot.enable = lib.mkForce false;
limine = {
enable = true; enable = true;
pkiBundle = "/var/lib/sbctl"; resolution = "3840x1080";
autoGenerateKeys.enable = true; enableEditor = true;
maxGenerations = 11;
secureBoot = {
enable = true;
autoGenerateKeys = true;
autoEnrollKeys.enable = true; autoEnrollKeys.enable = true;
}; };
loader.efi.canTouchEfiVariables = true; extraEntries = ''
loader.grub.enable = lib.mkForce false; /Windows
loader.systemd-boot.enable = lib.mkForce false; protocol: efi
path: boot():/EFI/Microsoft/Boot/bootmgfw.efi
'';
};
};
}; };
environment.systemPackages = [ pkgs.sbctl ]; environment.systemPackages = [ pkgs.sbctl ];