blob: e0326a08a027dc58d6389dfc0116a2174ebe5a00 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
{
lib,
pkgs,
...
}: {
environment.systemPackages = with pkgs; [
sbctl
tpm2-tss
];
boot = {
initrd.systemd.enable = true;
kernelPackages = pkgs.linuxPackages_latest;
kernelParams = ["amd_pstate=active"];
kernel.sysctl = {
"vm.swappiness" = 100;
"vm.vfs_cache_pressure" = 500;
"vm.dirty_background_ratio" = 1;
"vm.dirty_ratio" = 50;
};
loader.systemd-boot.enable = lib.mkForce false;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
supportedFilesystems = ["btrfs" "ntfs"];
};
}
|