laptop: add lanboote for secure boot

2025-11-23 00:23:41 -08:00
parent 91727dd2df
commit 8593abc8a5
4 changed files with 161 additions and 5 deletions
--- a/hosts/Yura-TPX13/default.nix
+++ b/hosts/Yura-TPX13/default.nix
@@ -11,6 +11,12 @@
    "sysrq_always_enabled=1"
  ];

+  boot.loader.systemd-boot.enable = false;
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
+
  networking.hostName = "Yura-TPX13"; # Define your hostname.
  networking.hostId = "8425e349"; # Required for ZFS.