Removed pcr check for testing purposes
This commit is contained in:
@@ -568,6 +568,8 @@ EOF
|
||||
|
||||
postrun_action() {
|
||||
echo ""
|
||||
# Add TPM2 boot disk decryption
|
||||
# Add pcr-check.nix
|
||||
}
|
||||
|
||||
nixos_update() {
|
||||
|
||||
@@ -7,8 +7,7 @@
|
||||
inputs.sops-nix.nixosModules.sops
|
||||
./disks/disko.nix
|
||||
./disks/snapraid.nix
|
||||
./disks/pcr-check.nix
|
||||
./hardware-configuration.nix
|
||||
# ./disks/pcr-check.nix
|
||||
];
|
||||
|
||||
# Hardware settings
|
||||
@@ -37,10 +36,8 @@
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
|
||||
# TPM2 PCR check
|
||||
systemIdentity.enable = true;
|
||||
# On first boot, get the value with: systemd-analyze pcrs 15 --json=short | jq -r ".[0].sha256"
|
||||
# and place it here.
|
||||
systemIdentity.pcr15 = null; # "6214de8c3d861c4b451acc8c4e24294c95d55bcec516bbf15c077ca3bffb6547";
|
||||
# systemIdentity.enable = true;
|
||||
# systemIdentity.pcr15 = null;
|
||||
|
||||
# Timezone
|
||||
time.timeZone = "Europe/Paris";
|
||||
|
||||
Reference in New Issue
Block a user