summaryrefslogtreecommitdiff
path: root/sys/boot/namespaced.nix
diff options
context:
space:
mode:
authorAlejandro Soto <alejandro@34project.org>2025-08-24 18:55:06 -0600
committerAlejandro Soto <alejandro@34project.org>2025-08-24 18:55:06 -0600
commitd7ac88762db111a7962c4e14b5f4e37ab85ccac7 (patch)
tree0c2c8c4383bef74215e3b7c48a2f6b0117f084bc /sys/boot/namespaced.nix
parent504589d1035f27b766bd33040b415b2725ece4ca (diff)
tree-wide: reformat using alejandra after enabling trivionomicon
Diffstat (limited to 'sys/boot/namespaced.nix')
-rw-r--r--sys/boot/namespaced.nix27
1 files changed, 16 insertions, 11 deletions
diff --git a/sys/boot/namespaced.nix b/sys/boot/namespaced.nix
index db01d55..3f95960 100644
--- a/sys/boot/namespaced.nix
+++ b/sys/boot/namespaced.nix
@@ -1,8 +1,12 @@
-{ config, lib, options, ... }:
+{
+ config,
+ lib,
+ options,
+ ...
+}:
with lib; let
cfg = config.local.boot.namespaced;
-in
-{
+in {
options.local.boot.namespaced = {
enable = mkEnableOption "system containerization";
};
@@ -11,15 +15,16 @@ in
boot.isContainer = true;
local.boot = mkMerge ([
- {
- loader = mkForce "none";
+ {
+ loader = mkForce "none";
- efi.enable = mkForce false;
- firmware.mode = mkForce "none";
- secureBoot.enable = mkForce false;
- impermanence.enable = mkForce false;
- }
- ] ++ map
+ efi.enable = mkForce false;
+ firmware.mode = mkForce "none";
+ secureBoot.enable = mkForce false;
+ impermanence.enable = mkForce false;
+ }
+ ]
+ ++ map
(name: {
stack.${name}.enable = mkForce false;
})