From ee0e15b3686efcd94d5b46e3fd6c8739faa8ef35 Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@hoyer.xyz>
Date: Tue, 5 Mar 2024 16:11:35 +0100
Subject: [PATCH] kernel command line parms

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
---
 systems/x86_64-linux/x1/default.nix               |  1 +
 .../x86_64-linux/x1/hardware-configuration.nix    | 15 +++++++++++----
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/systems/x86_64-linux/x1/default.nix b/systems/x86_64-linux/x1/default.nix
index 9053afd..6e8db76 100644
--- a/systems/x86_64-linux/x1/default.nix
+++ b/systems/x86_64-linux/x1/default.nix
@@ -42,6 +42,7 @@ with lib.plusultra;
     kernelPackages = lib.mkOverride 0 pkgs.linuxPackages_latest;
   };
 
+
   # Configure console keymap
   console.keyMap = "us";
   i18n.extraLocaleSettings = {
diff --git a/systems/x86_64-linux/x1/hardware-configuration.nix b/systems/x86_64-linux/x1/hardware-configuration.nix
index 7398840..0b8ffac 100644
--- a/systems/x86_64-linux/x1/hardware-configuration.nix
+++ b/systems/x86_64-linux/x1/hardware-configuration.nix
@@ -4,14 +4,21 @@
 { config, lib, pkgs, modulesPath, ... }:
 
 {
-  imports =
-    [
-      (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
 
   boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" "uas" "usbhid" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
+  boot.kernelParams = [
+    "lockdown=confidentiality"
+    "intel_iommu=on"
+    "quiet"
+    "splash"
+    "video=efifb:nobgrt"
+  ];
+
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =