feat: setup secure boot again.
This commit is contained in:
parent
9fecd11d5e
commit
6d1245843d
1 changed files with 8 additions and 8 deletions
|
|
@ -16,16 +16,16 @@
|
|||
boot.initrd.systemd.enable = true;
|
||||
|
||||
# To explicitly disable systemd-boot, lanzaboote takes care of that.
|
||||
boot.loader.systemd-boot.enable = lib.mkForce true;
|
||||
boot.loader.systemd-boot.enable = lib.mkForce false;
|
||||
|
||||
# Bootloader.
|
||||
# boot.lanzaboote = {
|
||||
# enable = true;
|
||||
# pkiBundle = "/var/lib/sbctl";
|
||||
# autoEnrollKeys = {
|
||||
# enable = true;
|
||||
# };
|
||||
# };
|
||||
boot.lanzaboote = {
|
||||
enable = true;
|
||||
pkiBundle = "/var/lib/sbctl";
|
||||
# autoEnrollKeys = {
|
||||
# enable = true;
|
||||
# };
|
||||
};
|
||||
|
||||
# Enable aarch64 emulation
|
||||
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue