Flake for my NixOS devices
1{
2 pkgs,
3 lib,
4 ...
5}: {
6 boot = {
7 initrd.systemd = {
8 enable = lib.mkDefault true;
9 };
10
11 # Use latest kernel with sysrqs and lockdown enabled
12 kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
13 kernelParams = lib.mkDefault ["lockdown=confidentiality"];
14 kernel.sysctl."kernel.sysrq" = 1;
15 };
16}