aviallon/nixos-lib
1
0
Fork 0
mirror of https://github.com/aviallon/nixos-lib.git synced 2026-04-05 17:27:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[Boot+Treewide] rename aviallon.boot.kernel to aviallon.boot.kernel.package

Browse source 
Rename aviallon.boot.extraKCflags to aviallon.boot.kernel.addOptimizationAttributes

Also add an option to add non-optimization attributes to kernel derivation.
This commit is contained in:
Antoine Viallon 2023-11-07 21:27:57 +01:00
parent 418f672a18
commit ec9cfceda6
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
3 changed files with 48 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

2
security/hardening.nix
View file

@ -41,7 +41,7 @@ in
# imports = [
# (modulesPath + "/profiles/hardened.nix")
# ];
aviallon.boot.kernel = mkIf cfg.hardcore pkgs.linuxKernel.kernels.linux_hardened;
aviallon.boot.kernel.package = mkIf cfg.hardcore pkgs.linuxKernel.kernels.linux_hardened;
security.lockKernelModules = mkIf cfg.hardcore (mkOverride 500 true);
# security.protectKernelImage = mkIf cfg.hardcore (mkOverride 500 false); # needed for kexec