Hardware config for pardalote

hosts/muskduck/default.nix

@@ -1,5 +1,6 @@
-{
-  # Kernel modules
+{lib, ...}:
+with lib; {
+  # Kernel modules.
   boot.initrd.availableKernelModules = [
     "xhci_pci"
     "nvme"
@@ -9,6 +10,17 @@
 
   boot.kernelModules = ["kvm-intel"];
 
+  # Enable lanzaboote & secure boot.
+  boot.initrd.systemd.enable = true;
+  boot.loader.systemd-boot.enable = mkForce false;
+  boot.bootspec.enable = true;
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+    settings.timeout = 0;
+  };
+
   # Root filesystem.
   fileSystems."/" = {
     device = "/dev/disk/by-uuid/63d79656-aa5b-466a-b369-be5eac3f51ab";
@@ -27,9 +39,6 @@
     ];
   };
 
-  # Allow CPU microcode.
-  hardware.cpu.intel.updateMicrocode = true;
-
   # Allows remote deployment on ARM systems (ie. Raspberry Pi).
   boot.binfmt.emulatedSystems = ["aarch64-linux"];
 }

hosts/pardalote/default.nix

@@ -0,0 +1,17 @@
+{
+  boot.initrd.availableKernelModules = ["ehci_pci" "ahci" "usb_storage" "sd_mod" "sdhci_pci"];
+  boot.kernelModules = ["kvm-intel"];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/e18f128e-1bd3-45d5-b323-50457e5904b4";
+    fsType = "ext4";
+  };
+
+  boot.initrd.luks.devices."luks-6d222bd7-973b-4b96-b76f-e4c51e885f63".device = "/dev/disk/by-uuid/6d222bd7-973b-4b96-b76f-e4c51e885f63";
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/7560-EA87";
+    fsType = "vfat";
+    options = ["fmask=0077" "dmask=0077"];
+  };
+}

suites/desktop/default.nix

@@ -8,18 +8,10 @@ with lib; {
 
   # Configure the bootloader.
   boot = {
-    # Enable secure boot.
-    bootspec.enable = true;
-    initrd.systemd.enable = true;
-    loader.systemd-boot.enable = mkForce false;
+    # Enable systemd-boot
+    loader.systemd-boot.enable = false;
     loader.efi.canTouchEfiVariables = true;
 
-    lanzaboote = {
-      enable = true;
-      pkiBundle = "/var/lib/sbctl";
-      settings.timeout = 0;
-    };
-
     # Enable quiet boot with splash
     plymouth.enable = true;
     consoleLogLevel = 3;