Initial setup for lanzaboote

This commit is contained in:
marked 2025-03-29 19:25:27 +01:00
parent 24a865004a
commit 1908280a34
6 changed files with 207 additions and 9 deletions

View file

@ -0,0 +1,10 @@
{ pkgs, lib, ... }:
{
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
}