From df867e2e0f198d41c08ee8046baa97949e0d6d51 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cyryl=20P=C5=82otnicki?= Date: Fri, 11 Oct 2019 19:24:15 +0100 Subject: [PATCH] user hardened kernel on foureighty --- nixos/boxes/foureighty.nix | 1 + nixos/gfx-intel.nix | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/boxes/foureighty.nix b/nixos/boxes/foureighty.nix index 93a1134b..7053e2bc 100644 --- a/nixos/boxes/foureighty.nix +++ b/nixos/boxes/foureighty.nix @@ -3,6 +3,7 @@ networking.hostName = "foureighty"; boot = { + kernelPackages = pkgs.linuxPackages_hardened; extraModulePackages = with config.boot.kernelPackages; [ wireguard ]; initrd.kernelModules = [ "i915" ]; initrd.availableKernelModules = [ diff --git a/nixos/gfx-intel.nix b/nixos/gfx-intel.nix index 39460285..0df5da13 100644 --- a/nixos/gfx-intel.nix +++ b/nixos/gfx-intel.nix @@ -5,7 +5,6 @@ hardware.opengl = { enable = true; driSupport = true; - driSupport32Bit = true; s3tcSupport = true; extraPackages = with pkgs; [ vaapiIntel