harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

sgx: unsgx and prevent sleep on lid close

Browse source 
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
This commit is contained in:
Harald Hoyer 2024-04-10 21:46:05 +02:00
parent 7d0cf0ac60
commit 4066b0cd80
1 changed files with 8 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
systems/x86_64-linux/sgx/default.nix
View file

@ -13,12 +13,11 @@
metacfg = { metacfg = {
base.enable = true; base.enable = true;
gui.enable = false; gui.enable = false;
nix-ld.enable = true; nix-ld.enable = false;
nix.enable = true; nix.enable = true;
aesmd_dcap.enable = true;
podman.enable = true; podman.enable = true;
secureboot.enable = true; secureboot.enable = true;
user.extraGroups = [ "docker" "sgx" ]; user.extraGroups = [ "docker" ];
}; };
virtualisation = { virtualisation = {
@ -26,6 +25,7 @@
libvirtd.enable = true; libvirtd.enable = true;
podman.dockerCompat = false; podman.dockerCompat = false;
}; };
systemd.services.libvirt-guests.after = [ "network-online.target" ]; systemd.services.libvirt-guests.after = [ "network-online.target" ];
system.autoUpgrade = { system.autoUpgrade = {
@ -34,19 +34,11 @@
allowReboot = true; allowReboot = true;
}; };
services.pcscd.enable = true; systemd.targets.sleep.enable = false;
systemd.targets.suspend.enable = false;
environment.etc."sgx_default_qcnl.conf".text = '' systemd.targets.hibernate.enable = false;
{ systemd.targets.hybrid-sleep.enable = false;
"pccs_url": "https://api.trustedservices.intel.com/sgx/certification/v4/", services.xserver.displayManager.gdm.autoSuspend = false;
"use_secure_cert": true,
"retry_times": 6,
"retry_delay": 10,
"pck_cache_expire_hours": 168,
"verify_collateral_cache_expire_hours": 168,
"local_cache_only": false
}
'';
system.stateVersion = "23.11"; system.stateVersion = "23.11";
} }