cyplo/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

hardened skinnyv

Browse source
This commit is contained in:
Cyryl Płotnicki 2021-02-28 14:26:18 +00:00
parent 2b0b9be428
commit 319e254f1c
2 changed files with 41 additions and 43 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
nixos/boxes/skinnyv/default.nix
View file

@ -15,22 +15,7 @@
../../git
];
boot = {
kernelPackages = pkgs.linuxPackages_latest;
initrd.luks.devices = {
root =
{
device = "/dev/disk/by-uuid/ef6e91d9-c477-4ab7-ae39-4a0ee413cebe";
preLVM = true;
allowDiscards = true;
};
};
loader.grub = {
device = "nodev";
efiSupport = true;
};
loader.efi.canTouchEfiVariables = true;
};
boot.kernelPackages = pkgs.linuxPackages_latest_hardened;
time.timeZone = "Europe/London";
fonts.fontconfig.enable = true;

13
nixos/boxes/skinnyv/hardware-configuration.nix
View file

@ -12,6 +12,19 @@
boot.initrd.kernelModules = [ "dm-snapshot" ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
boot.initrd.luks.devices = {
root =
{
device = "/dev/disk/by-uuid/ef6e91d9-c477-4ab7-ae39-4a0ee413cebe";
preLVM = true;
allowDiscards = true;
};
};
boot.loader.grub = {
device = "nodev";
efiSupport = true;
};
boot.loader.efi.canTouchEfiVariables = true;
fileSystems."/" =
{ device = "/dev/disk/by-uuid/0c1df18e-df45-4290-8887-6529d00ccb9d";