WIP: add secure boot

2025-11-23 00:23:41 -08:00
parent 91727dd2df
commit 578f18bc2d
4 changed files with 23 additions and 5 deletions
--- a/hosts/common-desktop.nix
+++ b/hosts/common-desktop.nix
@@ -11,10 +11,11 @@
  boot.loader = {
    efi.canTouchEfiVariables = true;
    timeout = 3;
-    systemd-boot = {
-      enable = true;
-      configurationLimit = 5;
-    };
+    systemd-boot.enable = false;
+  };
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
  };

  # https://nixos.wiki/wiki/Accelerated_Video_Playback