Hardware config for pardalote
This commit is contained in:
parent
0d21f295ad
commit
0d966fe5b8
3 changed files with 33 additions and 15 deletions
|
@ -1,5 +1,6 @@
|
||||||
{
|
{lib, ...}:
|
||||||
# Kernel modules
|
with lib; {
|
||||||
|
# Kernel modules.
|
||||||
boot.initrd.availableKernelModules = [
|
boot.initrd.availableKernelModules = [
|
||||||
"xhci_pci"
|
"xhci_pci"
|
||||||
"nvme"
|
"nvme"
|
||||||
|
@ -9,6 +10,17 @@
|
||||||
|
|
||||||
boot.kernelModules = ["kvm-intel"];
|
boot.kernelModules = ["kvm-intel"];
|
||||||
|
|
||||||
|
# Enable lanzaboote & secure boot.
|
||||||
|
boot.initrd.systemd.enable = true;
|
||||||
|
boot.loader.systemd-boot.enable = mkForce false;
|
||||||
|
boot.bootspec.enable = true;
|
||||||
|
|
||||||
|
boot.lanzaboote = {
|
||||||
|
enable = true;
|
||||||
|
pkiBundle = "/var/lib/sbctl";
|
||||||
|
settings.timeout = 0;
|
||||||
|
};
|
||||||
|
|
||||||
# Root filesystem.
|
# Root filesystem.
|
||||||
fileSystems."/" = {
|
fileSystems."/" = {
|
||||||
device = "/dev/disk/by-uuid/63d79656-aa5b-466a-b369-be5eac3f51ab";
|
device = "/dev/disk/by-uuid/63d79656-aa5b-466a-b369-be5eac3f51ab";
|
||||||
|
@ -27,9 +39,6 @@
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
# Allow CPU microcode.
|
|
||||||
hardware.cpu.intel.updateMicrocode = true;
|
|
||||||
|
|
||||||
# Allows remote deployment on ARM systems (ie. Raspberry Pi).
|
# Allows remote deployment on ARM systems (ie. Raspberry Pi).
|
||||||
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
||||||
}
|
}
|
||||||
|
|
17
hosts/pardalote/default.nix
Executable file
17
hosts/pardalote/default.nix
Executable file
|
@ -0,0 +1,17 @@
|
||||||
|
{
|
||||||
|
boot.initrd.availableKernelModules = ["ehci_pci" "ahci" "usb_storage" "sd_mod" "sdhci_pci"];
|
||||||
|
boot.kernelModules = ["kvm-intel"];
|
||||||
|
|
||||||
|
fileSystems."/" = {
|
||||||
|
device = "/dev/disk/by-uuid/e18f128e-1bd3-45d5-b323-50457e5904b4";
|
||||||
|
fsType = "ext4";
|
||||||
|
};
|
||||||
|
|
||||||
|
boot.initrd.luks.devices."luks-6d222bd7-973b-4b96-b76f-e4c51e885f63".device = "/dev/disk/by-uuid/6d222bd7-973b-4b96-b76f-e4c51e885f63";
|
||||||
|
|
||||||
|
fileSystems."/boot" = {
|
||||||
|
device = "/dev/disk/by-uuid/7560-EA87";
|
||||||
|
fsType = "vfat";
|
||||||
|
options = ["fmask=0077" "dmask=0077"];
|
||||||
|
};
|
||||||
|
}
|
|
@ -8,18 +8,10 @@ with lib; {
|
||||||
|
|
||||||
# Configure the bootloader.
|
# Configure the bootloader.
|
||||||
boot = {
|
boot = {
|
||||||
# Enable secure boot.
|
# Enable systemd-boot
|
||||||
bootspec.enable = true;
|
loader.systemd-boot.enable = false;
|
||||||
initrd.systemd.enable = true;
|
|
||||||
loader.systemd-boot.enable = mkForce false;
|
|
||||||
loader.efi.canTouchEfiVariables = true;
|
loader.efi.canTouchEfiVariables = true;
|
||||||
|
|
||||||
lanzaboote = {
|
|
||||||
enable = true;
|
|
||||||
pkiBundle = "/var/lib/sbctl";
|
|
||||||
settings.timeout = 0;
|
|
||||||
};
|
|
||||||
|
|
||||||
# Enable quiet boot with splash
|
# Enable quiet boot with splash
|
||||||
plymouth.enable = true;
|
plymouth.enable = true;
|
||||||
consoleLogLevel = 3;
|
consoleLogLevel = 3;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue