harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

sgx: unsgx and prevent sleep on lid close

Browse source 
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
This commit is contained in:
Harald Hoyer 2024-04-10 21:46:05 +02:00
parent 7d0cf0ac60
commit 4066b0cd80
1 changed files with 8 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
systems/x86_64-linux/sgx/default.nix
View file

@ -13,12 +13,11 @@
metacfg = {
base.enable = true;
gui.enable = false;
nix-ld.enable = true;
nix-ld.enable = false;
nix.enable = true;
aesmd_dcap.enable = true;
podman.enable = true;
secureboot.enable = true;
user.extraGroups = [ "docker" "sgx" ];
user.extraGroups = [ "docker" ];
};
virtualisation = {
@ -26,6 +25,7 @@
libvirtd.enable = true;
podman.dockerCompat = false;
};
systemd.services.libvirt-guests.after = [ "network-online.target" ];
system.autoUpgrade = {
@ -34,19 +34,11 @@
allowReboot = true;
};
services.pcscd.enable = true;
environment.etc."sgx_default_qcnl.conf".text = ''
{
"pccs_url": "https://api.trustedservices.intel.com/sgx/certification/v4/",
"use_secure_cert": true,
"retry_times": 6,
"retry_delay": 10,
"pck_cache_expire_hours": 168,
"verify_collateral_cache_expire_hours": 168,
"local_cache_only": false
}
'';
systemd.targets.sleep.enable = false;
systemd.targets.suspend.enable = false;
systemd.targets.hibernate.enable = false;
systemd.targets.hybrid-sleep.enable = false;
services.xserver.displayManager.gdm.autoSuspend = false;
system.stateVersion = "23.11";
}