systemd-boot: Don't allow modifying boot options
1 file changed, 4 insertions(+), 1 deletion(-)
jump to
M modules/systemd-boot.nix → modules/systemd-boot.nix
@@ -1,6 +1,9 @@ { config, pkgs, ... }: -{ boot.loader.systemd-boot.enable = true; +{ boot.loader.systemd-boot = { + enable = true; + editor = false; # Don't allow modification + }; boot.loader.efi.canTouchEfiVariables = true; boot.vesa = true; boot.earlyVconsoleSetup = true;