do the same for two other hosts
Signed-off-by: unexplrd <unexplrd@linerds.us>
This commit is contained in:
55
hosts/dunamis/boot.nix
Normal file
55
hosts/dunamis/boot.nix
Normal file
@ -0,0 +1,55 @@
|
||||
{
|
||||
pkgs,
|
||||
inputs,
|
||||
...
|
||||
}: {
|
||||
imports = with inputs; [
|
||||
chaotic.nixosModules.default
|
||||
];
|
||||
boot = {
|
||||
# kernelPackages = pkgs.linuxPackages_latest;
|
||||
kernelPackages = pkgs.linuxPackages_cachyos;
|
||||
kernelModules = ["kvm-amd"];
|
||||
kernelParams = [
|
||||
# "mitigations=auto"
|
||||
# "spectre_v2=on"
|
||||
# "spectre_v2_user=on"
|
||||
# "spectre_bhi=on"
|
||||
# "spec_store_bypass_disable=on"
|
||||
# "tsx=off"
|
||||
# "kvm.nx_huge_pages=force"
|
||||
# "l1d_flush=on"
|
||||
"amd_iommu=force_isolation"
|
||||
"debugfs=off"
|
||||
"efi=disable_early_pci_dma"
|
||||
"gather_data_sampling=force"
|
||||
# "ia32_emulation=0"
|
||||
"intel_iommu=on"
|
||||
"iommu.passthrough=0"
|
||||
"iommu.strict=1"
|
||||
"iommu=force"
|
||||
"lockdown=confidentiality"
|
||||
"module.sig_enforce=1"
|
||||
"page_alloc.shuffle=1"
|
||||
"reg_file_data_sampling=on"
|
||||
"spec_rstack_overflow=safe-ret"
|
||||
"vsyscall=none"
|
||||
];
|
||||
initrd = {
|
||||
availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
|
||||
kernelModules = ["i915"];
|
||||
systemd.enable = true; # needed for auto-unlocking with TPM
|
||||
};
|
||||
loader.efi.canTouchEfiVariables = true;
|
||||
loader.systemd-boot = {
|
||||
enable = true;
|
||||
consoleMode = "auto";
|
||||
};
|
||||
plymouth.enable = true;
|
||||
};
|
||||
console = {
|
||||
earlySetup = true;
|
||||
packages = [pkgs.terminus_font];
|
||||
font = "${pkgs.terminus_font}/share/consolefonts/ter-c18n.psf.gz";
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user