infra/localhost
1
0
Fork 0
Code Releases Activity

Disable kernel modules locking

Browse Source
This commit is contained in:
dump_stack() 2019-11-19 16:31:28 +00:00
parent 3e2f087125
commit 3a262a418c
Signed by: dump_stack
GPG Key ID: BE44DA8C062D87DC
2 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
configuration.nix
View File

@ -23,14 +23,6 @@ in {
time.timeZone = "UTC"; time.timeZone = "UTC";
boot.kernelPackages = unstable.linuxPackages_latest; boot.kernelPackages = unstable.linuxPackages_latest;
boot.kernelModules = [
"pl2303"
"fuse"
"veth" "usbnet" "mii" "cdc_ether"
"ipt_REJECT" "xt_CHECKSUM" "iptable_mangle"
"snd_usb_audio"
"thunderbolt" "intel_wmi_thunderbolt"
];
boot.blacklistedKernelModules = [ "nouveau" ]; boot.blacklistedKernelModules = [ "nouveau" ];
boot.earlyVconsoleSetup = true; boot.earlyVconsoleSetup = true;

1
security.nix
View File

@ -8,6 +8,7 @@ let
in { in {
security.allowUserNamespaces = true; security.allowUserNamespaces = true;
security.allowSimultaneousMultithreading = true; security.allowSimultaneousMultithreading = true;
security.lockKernelModules = false;
programs.ssh.startAgent = false; programs.ssh.startAgent = false;
programs.gnupg = { programs.gnupg = {