aaronandClaude Opus 5.5
bfaa1c7d9f
Bumps nixos-unstable from 6510408 (2026-10-10) to 3ec6363 (2026-10-23), which includes nixpkgs f903b88 (cacert 3.126 -> 3.131.1). NSS 3.131.1 drops emSign ECC Root CA - G3 after the eMudhra intermediate key compromise. nixpkgs removed the scripted initrd in this range, so boot.initrd.systemd.enable is now a failing assertion. systemd initrd was already enabled, so dropping the line does not change boot. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
38 lines
743 B
Nix
38 lines
743 B
Nix
{ pkgs, ... }:
|
|
|
|
{
|
|
# set bootloader to systemd
|
|
boot.loader = {
|
|
systemd-boot.enable = true;
|
|
# no kernel command line editing at the boot menu (e.g. init=/bin/sh)
|
|
systemd-boot.editor = false;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
|
|
# plymouth
|
|
boot.plymouth = {
|
|
enable = true;
|
|
theme = "spinner";
|
|
};
|
|
|
|
# kernel options
|
|
boot.kernelParams = [
|
|
"quiet"
|
|
"acpi.debug_level=0"
|
|
];
|
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
|
boot.consoleLogLevel = 2;
|
|
|
|
# /tmp in RAM, nix builds go to /var/tmp instead (see settings.nix)
|
|
boot.tmp = {
|
|
useTmpfs = true;
|
|
tmpfsSize = "50%";
|
|
};
|
|
|
|
# Add boot-related packages
|
|
environment.systemPackages = with pkgs; [
|
|
efibootmgr
|
|
terminus_font
|
|
];
|
|
}
|