feat: setup secure boot again.

This commit is contained in:
CronyAkatsuki 2026-03-06 11:26:15 +01:00
parent 9fecd11d5e
commit 6d1245843d

View file

@ -16,16 +16,16 @@
boot.initrd.systemd.enable = true;
# To explicitly disable systemd-boot, lanzaboote takes care of that.
boot.loader.systemd-boot.enable = lib.mkForce true;
boot.loader.systemd-boot.enable = lib.mkForce false;
# Bootloader.
# boot.lanzaboote = {
# enable = true;
# pkiBundle = "/var/lib/sbctl";
# autoEnrollKeys = {
# enable = true;
# };
# };
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
# autoEnrollKeys = {
# enable = true;
# };
};
# Enable aarch64 emulation
boot.binfmt.emulatedSystems = ["aarch64-linux"];