infra
/
localhost
1
0
Fork 0
Code Releases Activity

Disable kernel modules locking

master
dump_stack() 2019-11-19 16:31:28 +00:00
parent 3e2f087125
commit 3a262a418c
Signed by: dump_stack
GPG Key ID: BE44DA8C062D87DC
2 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
configuration.nix
View File

@ -23,14 +23,6 @@ in {
time.timeZone = "UTC";
boot.kernelPackages = unstable.linuxPackages_latest;
boot.kernelModules = [
"pl2303"
"fuse"
"veth" "usbnet" "mii" "cdc_ether"
"ipt_REJECT" "xt_CHECKSUM" "iptable_mangle"
"snd_usb_audio"
"thunderbolt" "intel_wmi_thunderbolt"
];
boot.blacklistedKernelModules = [ "nouveau" ];
boot.earlyVconsoleSetup = true;

1
security.nix
View File

@ -8,6 +8,7 @@ let
in {
security.allowUserNamespaces = true;
security.allowSimultaneousMultithreading = true;
security.lockKernelModules = false;
programs.ssh.startAgent = false;
programs.gnupg = {