Daniel Lundin
c59ea29957
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
We want verity protected partitions as well as encrypted state/data along with verified boot. This PR integrates Peter Marshall's awesome little Nixlet project as a starting point, especially the nice testing scaffolding will be super helpful! ✨ https://github.com/petm5/nixlet/
48 lines
1 KiB
Nix
48 lines
1 KiB
Nix
{ prev, ... }:
|
|
|
|
prev.systemd.override {
|
|
withAcl = false;
|
|
withAnalyze = false;
|
|
withApparmor = false;
|
|
withAudit = false;
|
|
withEfi = true;
|
|
withCompression = false;
|
|
withCoredump = false;
|
|
withCryptsetup = false;
|
|
withRepart = false;
|
|
withDocumentation = false;
|
|
withFido2 = false;
|
|
withFirstboot = false;
|
|
withHomed = false;
|
|
withHostnamed = false;
|
|
withHwdb = false;
|
|
withImportd = false;
|
|
withIptables = false;
|
|
withKmod = false;
|
|
withLibBPF = false;
|
|
withLibidn2 = false;
|
|
withLocaled = false;
|
|
withLogind = false;
|
|
withMachined = false;
|
|
withNetworkd = false;
|
|
withNss = false;
|
|
withOomd = false;
|
|
withPam = false;
|
|
withPasswordQuality = false;
|
|
withPCRE2 = false;
|
|
withPolkit = false;
|
|
withPortabled = false;
|
|
withQrencode = false;
|
|
withRemote = false;
|
|
withResolved = false;
|
|
withShellCompletions = false;
|
|
withSysusers = false;
|
|
withSysupdate = false;
|
|
withTimedated = false;
|
|
withTimesyncd = false;
|
|
withTpm2Tss = false;
|
|
withUkify = true;
|
|
withUserDb = false;
|
|
withUtmp = false;
|
|
withVmspawn = false;
|
|
}
|