42 lines
970 B
Nix
42 lines
970 B
Nix
{
|
|
pkgs,
|
|
config,
|
|
inputs,
|
|
...
|
|
}: {
|
|
imports = with inputs; [
|
|
chaotic.nixosModules.default
|
|
];
|
|
boot = {
|
|
# kernelPackages = pkgs.linuxPackages_latest;
|
|
kernelPackages = pkgs.linuxPackages_cachyos;
|
|
kernelModules = ["kvm-intel"];
|
|
kernelParams = [
|
|
"debugfs=off"
|
|
"efi=disable_early_pci_dma"
|
|
# "gather_data_sampling=force"
|
|
"intel_iommu=on"
|
|
"iommu.passthrough=0"
|
|
"iommu.strict=1"
|
|
"iommu=force"
|
|
# "lockdown=confidentiality"
|
|
# "module.sig_enforce=1"
|
|
"page_alloc.shuffle=1"
|
|
# "reg_file_data_sampling=on"
|
|
# "spec_rstack_overflow=safe-ret"
|
|
"vsyscall=none"
|
|
];
|
|
loader.efi.canTouchEfiVariables = true;
|
|
loader.systemd-boot = {
|
|
enable = true;
|
|
consoleMode = "auto";
|
|
};
|
|
plymouth.enable = true;
|
|
};
|
|
console = {
|
|
earlySetup = true;
|
|
packages = [pkgs.terminus_font];
|
|
font = "${pkgs.terminus_font}/share/consolefonts/ter-c18n.psf.gz";
|
|
};
|
|
}
|