koishi/nixos
1
0
Fork 0
Code Issues Pull requests Projects Activity

refactor: rename global from faucet

Browse source
This commit is contained in:
514fpv 2024-01-07 22:01:31 +08:00
parent 4b12d60e44
commit b01142144e
Signed by: koishi
SSH key fingerprint: SHA256:axz0uIzzY+5W19i7QOUuiw5LSqhKfCBKPf3L4xFRxLw
31 changed files with 40 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

29
faucet/boot/default.nix
View file

@ -1,29 +0,0 @@
{ pkgs
, lib
, config
, ... }: with lib; let
cfg = config.faucet.boot;
in {
options.faucet.boot = {
enable = mkEnableOption "bootloader installation and maintenance" // { default = true; };
systemd-boot = mkEnableOption "generation selection via systemd-boot" // { default = !cfg.lanzaboote; };
lanzaboote = mkEnableOption "secure boot maintenance via lanzaboote";
};
config = let
sbPath = "/nix/persist/lanzaboote";
in mkIf cfg.enable {
boot = {
initrd.systemd.enable = true;
lanzaboote.enable = cfg.lanzaboote;
lanzaboote.pkiBundle = sbPath;
loader.systemd-boot.enable = cfg.systemd-boot;
loader.efi.canTouchEfiVariables = true;
tmp.cleanOnBoot = true;
};
# symlink for sbctl
environment.etc.secureboot.source = sbPath;
environment.systemPackages = [ pkgs.sbctl ];
};
}