{ config, pkgs, ... }: { imports = [ # Include the results of the hardware scan. ./hardware-configuration.nix ]; # Bootloader boot.loader = { efi = { canTouchEfiVariables = true; }; grub = { enable = true; version = 2; efiSupport = true; enableCryptodisk = true; device = "nodev"; # extraEntries = # # Recovery mode # # Generate the image with generate-recovery.sh # '' # menuentry "NixOS - Recovery" { # search --set=drive1 -fs-uuid 330B-45DE # linux ($drive1)//kernels/recovery-linux-bzImage loglevel=4 # initrd ($drive1)//kernels/recovery-initrd # } # ''; }; }; # Decrypt disk boot.initrd.luks.devices = { sda3_crypt = { name = "sda3_crypt"; device = "/dev/disk/by-uuid/ba5dc9cd-3a73-4a01-880b-8720844307ae"; preLVM = true; }; }; # Kernel boot.initrd.availableKernelModules = [ "usb_storage" ]; boot.kernelParams = [ "i915.dc_enable=0" "intel_idle.max_cstate=1" ]; boot.kernelPackages = pkgs.linuxPackages_latest; # Hardware hardware.firmware = with pkgs; [ firmwareLinuxNonfree ]; ## mcelog hardware.mcelog.enable = true; services.udev.extraRules = '' ACTION=="add", KERNEL=="mcelog", SUBSYSTEM=="misc", TAG+="systemd", ENV{SYSTEMD_WANTS}+="mcelog.service" '' }