rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2024-11-15 05:13:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

thinkpad: reenable all modules

Browse source
This commit is contained in:
Rouven Seifert 2024-03-23 00:31:32 +01:00
parent a16bc598a4
commit a8d2ace6ab
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
3 changed files with 19 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
hosts/thinkpad/default.nix
View file

@ -25,12 +25,12 @@
boot = {
kernelModules = [ "v4l2loopback" ];
kernelPackages = pkgs.linuxPackages_latest;
extraModulePackages = [
config.boot.kernelPackages.v4l2loopback
];
extraModprobeConfig = ''
options v4l2loopback exclusive_caps=1 card_label="Virtual Camera"
'';
# extraModulePackages = [
# config.boot.kernelPackages.v4l2loopback
# ];
# extraModprobeConfig = ''
# options v4l2loopback exclusive_caps=1 card_label="Virtual Camera"
# '';
tmp.useTmpfs = true;
};

16
hosts/thinkpad/modules/security/default.nix
View file

@ -35,13 +35,13 @@
# This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false
# for now.
loader.systemd-boot.enable = lib.mkForce true;
# lanzaboote = {
# enable = true;
# pkiBundle = "/etc/secureboot";
# configurationLimit = 10;
# };
# loader.systemd-boot.editor = false;
# loader.efi.canTouchEfiVariables = true;
loader.systemd-boot.enable = lib.mkForce false;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
configurationLimit = 10;
};
loader.systemd-boot.editor = false;
loader.efi.canTouchEfiVariables = true;
};
}

7
hosts/thinkpad/modules/virtualisation/default.nix
View file

@ -1,7 +1,10 @@
{ pkgs, ... }:
{
virtualisation = {
docker.enable = true;
docker = {
enable = true;
extraOptions = "--iptables=false";
};
libvirtd = {
enable = true;
qemu = {
@ -15,7 +18,7 @@
spiceUSBRedirection.enable = true;
};
# allow libvirts internal network stuff
networking.firewall.trustedInterfaces = [ "virbr0" "br0" ];
networking.firewall.trustedInterfaces = [ "virbr0" "br0" "docker0" ];
programs.virt-manager.enable = true;
environment.systemPackages = with pkgs; [
virt-viewer