blob: 605b7890c5b5a65210f246e8896d6360c3dc89a5 [file] [log] [blame]
Samuel Shuertf1d6e992023-11-24 17:28:33 -05001{ lib, ... }: {
2 boot = {
3 supportedFilesystems = [ "ntfs" ];
4 bootspec.enable = true;
5 loader.systemd-boot = {
6 enable = lib.mkForce false;
7 };
8 lanzaboote = {
9 enable = true;
10 pkiBundle = "/etc/secureboot";
11
12 settings = {
13 auto-entries = true;
14 };
15
16 };
17 loader.efi.canTouchEfiVariables = true;
Samuel Shuertf1d6e992023-11-24 17:28:33 -050018 };
19}