aviallon/nixos-lib
1
0
Fork 0
mirror of https://github.com/aviallon/nixos-lib.git synced 2026-04-06 01:38:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[Boot] Add kernel config option to aviallon namespace

Browse source 
Allows advanced patching / overriding of the kernel while still allowing
to set the kernel in other modules.
This commit is contained in:
Antoine Viallon 2022-11-09 17:26:18 +01:00
parent 3f22bcff49
commit 91c5ba1e69
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
3 changed files with 13 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hardening.nix
View file

@ -41,7 +41,7 @@ in
# imports = [
# (modulesPath + "/profiles/hardened.nix")
# ];
boot.kernelPackages = mkIf cfg.hardcore pkgs.linuxPackages_hardened;
aviallon.boot.kernel = mkIf cfg.hardcore pkgs.linuxKernel.kernels.linux_hardened;
security.lockKernelModules = mkIf cfg.hardcore (mkOverride 500 true);
# security.protectKernelImage = mkIf cfg.hardcore (mkOverride 500 false); # needed for kexec