systemd-boot: Don't allow modifying boot options
Alan Pearce alan@alanpearce.eu
Fri, 15 Sep 2017 14:00:45 +0200
1 files changed, 4 insertions(+), 1 deletions(-)
jump to
M modules/systemd-boot.nix → modules/systemd-boot.nix
@@ -1,6 +1,9 @@ { config, pkgs, ... }: -{ boot.loader.systemd-boot.enable = true; +{ boot.loader.systemd-boot = { + enable = true; + editor = false; # Don't allow modification + }; boot.loader.efi.canTouchEfiVariables = true; boot.vesa = true; boot.earlyVconsoleSetup = true;