Fix security flaw and remove systemd-boot timeout for gunther
This commit is contained in:
parent
c7d63aaa53
commit
f403b17ed1
2 changed files with 3 additions and 0 deletions
|
@ -50,6 +50,7 @@
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
boot.loader.efi.efiSysMountPoint = "/boot";
|
boot.loader.efi.efiSysMountPoint = "/boot";
|
||||||
boot.loader.systemd-boot.enable = true;
|
boot.loader.systemd-boot.enable = true;
|
||||||
|
boot.loader.systemd-boot.editor = false;
|
||||||
boot.plymouth.enable = true;
|
boot.plymouth.enable = true;
|
||||||
|
|
||||||
# udev for brillo
|
# udev for brillo
|
||||||
|
|
|
@ -39,6 +39,7 @@
|
||||||
kernelPackages = pkgs.linuxPackages_latest;
|
kernelPackages = pkgs.linuxPackages_latest;
|
||||||
|
|
||||||
# systemd-boot
|
# systemd-boot
|
||||||
|
loader.timeout = null;
|
||||||
loader.efi.canTouchEfiVariables = true;
|
loader.efi.canTouchEfiVariables = true;
|
||||||
loader.efi.efiSysMountPoint = "/boot";
|
loader.efi.efiSysMountPoint = "/boot";
|
||||||
loader.systemd-boot = {
|
loader.systemd-boot = {
|
||||||
|
@ -54,6 +55,7 @@
|
||||||
enable = true;
|
enable = true;
|
||||||
sortKey = "z_edk2";
|
sortKey = "z_edk2";
|
||||||
};
|
};
|
||||||
|
editor = false;
|
||||||
};
|
};
|
||||||
|
|
||||||
# plymouth
|
# plymouth
|
||||||
|
|
Loading…
Reference in a new issue