From 69c2209ebb522fca5820924654b1e459542d2f8f Mon Sep 17 00:00:00 2001
From: yaroslav <yaroslav@Ratchet.local>
Date: Wed, 29 Apr 2026 14:21:16 +0300
Subject: [PATCH] tpm fixes

---
 hosts/generic/security_quirks.nix | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/hosts/generic/security_quirks.nix b/hosts/generic/security_quirks.nix
index e538137..d865cfd 100644
--- a/hosts/generic/security_quirks.nix
+++ b/hosts/generic/security_quirks.nix
@@ -1,7 +1,11 @@
-{...}:
+{pkgs, ...}:
 {
   security.tpm2.enable = true;
   security.tpm2.pkcs11.enable = true;  # expose /run/current-system/sw/lib/libtpm2_pkcs11.so
   security.tpm2.tctiEnvironment.enable = true;  # TPM2TOOLS_TCTI and TPM2_PKCS11_TCTI env variables
-  users.users.YOUR_USER.extraGroups = [ "tss" ];  # tss group has access to TPM devices
+  security.tpm2.abrmd.enable = true;
+  users.users.yaroslav.extraGroups = [ "tss" ];  # tss group has access to TPM devices
+  environment.systemPackages = [
+    pkgs.tpm2-tss
+  ];
 }