hosts: Add secureboot
All checks were successful
check / check (push) Successful in 32s

This commit is contained in:
Florian RICHER 2025-02-01 16:39:00 +01:00
parent 31e3bbe9e9
commit 78fbe38b71
Signed by: florian.richer
GPG key ID: C73D37CBED7BFC77
2 changed files with 10 additions and 2 deletions

View file

@ -15,7 +15,11 @@
];
# Bootloader.
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
boot.loader.efi.canTouchEfiVariables = true;
# Limit the number of generations to keep

View file

@ -15,7 +15,11 @@
];
# Bootloader.
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
boot.loader.efi.canTouchEfiVariables = true;
# Limit the number of generations to keep