1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
{ lib, pkgs, ... }: { environment.systemPackages = with pkgs; [ sbctl ]; boot.loader.systemd-boot.enable = lib.mkForce false; boot.lanzaboote = { enable = true; pkiBundle = "/var/lib/sbctl"; }; }