fix: do not allow edits to the bootloader

2026-10-03 14:11:29 +02:00
1 changed files with 2 additions and 0 deletions
@@ -4,6 +4,8 @@
  # set bootloader to systemd
  boot.loader = {
    systemd-boot.enable = true;
+    # no kernel command line editing at the boot menu (e.g. init=/bin/sh)
+    systemd-boot.editor = false;
    efi.canTouchEfiVariables = true;
  };