Daniel Lundin
c59ea29957
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
We want verity protected partitions as well as encrypted state/data along with verified boot. This PR integrates Peter Marshall's awesome little Nixlet project as a starting point, especially the nice testing scaffolding will be super helpful! ✨ https://github.com/petm5/nixlet/
15 lines
391 B
Nix
15 lines
391 B
Nix
{ config, ... }:
|
|
{
|
|
boot = {
|
|
bootspec.enable = false;
|
|
initrd.kernelModules = config.boot.kernelModules;
|
|
kernel.enable = false; # No kernel or modules in the rootfs
|
|
modprobeConfig.enable = false;
|
|
};
|
|
|
|
system.build = {
|
|
inherit (config.boot.kernelPackages) kernel;
|
|
};
|
|
|
|
system.modulesTree = [ config.boot.kernelPackages.kernel ] ++ config.boot.extraModulePackages;
|
|
}
|