jay/nixverse
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set up bootloader stuff for encrypted impermanance.

Browse Source
This commit is contained in:
jay
2025-07-07 02:19:35 +00:00
parent 05cd5cce03
commit f5fe043de9
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
nodes/hosts/lappy/system/bootloader.nix
View File

@@ -1,5 +1,9 @@
{ pkgs, config, ... }: { { pkgs, config, ... }: {
boot = { boot = {
tmp = {
useTmpfs = true;
tmpfsSize = "50%";
};
loader = { loader = {
systemd-boot.enable = true; systemd-boot.enable = true;
efi.canTouchEfiVariables = true; efi.canTouchEfiVariables = true;
@@ -38,10 +42,15 @@
# /mnt/persist # /mnt/persist
# /mnt/nix # /mnt/nix
# /mnt # /mnt
#luks.devices."cryptroot".device = "/dev/disk/by-uuid/e68d4928-961d-4c80-9d3c-921514ebc63c"; luks.devices."cryptroot" = {
device = "/dev/disk/by-partlabel/luks";
allowDiscards = true;
};
kernelModules = [ ]; kernelModules = [ ];
availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ]; availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
}; };
}; };
} }