all repos — nixfiles @ 28e8cdf197e28662d2933daa2a742cff91ed05af

System and user configuration, managed by nix and home-manager

systemd-boot: Don't allow modifying boot options
Alan Pearce alan@alanpearce.eu
Fri, 15 Sep 2017 14:00:45 +0200
commit

28e8cdf197e28662d2933daa2a742cff91ed05af

parent

3cd6ae385ed8ac2efd7b63ab6bd698ea8efc0c67

1 files changed, 4 insertions(+), 1 deletions(-)

jump to
M modules/systemd-boot.nixmodules/systemd-boot.nix
@@ -1,6 +1,9 @@ { config, pkgs, ... }:
 
-{ boot.loader.systemd-boot.enable = true;
+{ boot.loader.systemd-boot = {
+    enable = true;
+    editor = false; # Don't allow modification
+  };
   boot.loader.efi.canTouchEfiVariables = true;
   boot.vesa = true;
   boot.earlyVconsoleSetup = true;