christoph/flake-nixinator
1
Fork 0
Code Activity

Modules/Bootloader: Update lanzaboote config (enable automatic key generation and enrollment)

Browse Source
This commit is contained in:
christoph
2026-08-31 20:30:27 +02:00
parent daf7eb8d75
commit 76c28f65ff
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
system/systemmodules/bootloader/default.nix
+7
View File
@@ -42,6 +42,13 @@ in {
boot.lanzaboote = { boot.lanzaboote = {
enable = true; enable = true;
autoGenerateKeys.enable = true;
# WARN: Needs persistent /var/lib/auto-cryptenroll
autoEnrollKeys = {
enable = true;
includeMicrosoftKeys = true;
};
# WARN: Make sure to persist this if using impermanence! # WARN: Make sure to persist this if using impermanence!
pkiBundle = "/var/lib/sbctl"; pkiBundle = "/var/lib/sbctl";