flake/nixos/profiles/opt-in/lanzaboote.nix

8 lines
192 B
Nix

{pkgs, ...}: {
environment.systemPackages = with pkgs; [sbctl];
boot.loader.systemd-boot.enable = false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
}