added lanzaboote for ratchet

2026-04-29 13:17:33 +03:00
parent a371861dd5
commit 792818bba3
1 changed files with 12 additions and 0 deletions
@@ -58,6 +58,18 @@
          ./hosts/generic/virtualization.nix
          ./hosts/generic/plymouth.nix
          ./home/yaroslav/steam.nix
+          lanzaboote.nixosModules.lanzaboote
+          ({ pkgs, lib, ... }: {
+            # Lanzaboote currently replaces the systemd-boot module.
+            # This setting is usually set to true in configuration.nix
+            # generated at installation time. So we force it to false
+            # for now.
+            boot.loader.systemd-boot.enable = lib.mkForce false;
+            boot.lanzaboote = {
+              enable = true;
+              pkiBundle = "/var/lib/sbctl";
+            };
+          })
          home-manager.nixosModules.home-manager
          {
            home-manager.useUserPackages = true;