dotfiles/nixos/boot.nix
2020-02-16 10:15:11 +00:00

22 lines
506 B
Nix

{ config, pkgs, ... }:
{
fileSystems."/".options = [ "noatime" "nodiratime" "discard" ];
security.lockKernelModules = false;
boot = {
kernel.sysctl = {
"vm.swappiness" = 1;
"max_user_watches" = 524288;
"kernel.dmesg_restrict" = true;
"kernel.unprivileged_bpf_disabled" = true;
"kernel.unprivileged_userns_clone" = 1;
"net.core.bpf_jit_harden" = true;
};
loader.grub = {
enable = true;
version = 2;
useOSProber = true;
};
};
}