harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

refactor: streamline kernel boot parameters

Browse source 
Remove insecure and redundant kernel boot options. This enhancement improves system security by defaulting to standard mitigations and settings.
This commit is contained in:
Harald Hoyer 2024-08-03 16:15:21 +02:00
parent cd69324e48
commit 31323f340f
2 changed files with 0 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
systems/x86_64-linux/t15/default.nix
View file

@ -38,5 +38,4 @@
bits = 4096; bits = 4096;
} }
]; ];
} }

14
systems/x86_64-linux/t15/hardware-configuration.nix
View file

@ -34,20 +34,6 @@
"quiet" "quiet"
"splash" "splash"
"video=efifb:nobgrt" "video=efifb:nobgrt"
# unsafe, but no secrets on that machine
"noibrs"
"noibpb"
"nopti"
"nospectre_v2"
"nospectre_v1"
"l1tf=off"
"nospec_store_bypass_disable"
"no_stf_barrier"
"mds=off"
"tsx=on"
"tsx_async_abort=off"
"mitigations=off"
]; ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];