fix: grub.devices now forced to have exclusively nodev device

This commit is contained in:
Ceferino Patino 2026-05-28 16:24:33 -05:00
commit e1d6c7048f
Signed by: c4patino
SSH key fingerprint: SHA256:9fQ9TsujGrdNNi76mnsu63v7dS5JOmHRZEqBOl49OR8
2 changed files with 3 additions and 3 deletions

View file

@ -4,7 +4,7 @@
namespace,
...
}: let
inherit (lib) mkIf mkEnableOption;
inherit (lib) mkIf mkEnableOption mkForce;
inherit (lib.${namespace}) getAttrByNamespace mkOptionsWithNamespace;
base = "${namespace}.hardware.bootloader";
cfg = getAttrByNamespace config base;
@ -18,7 +18,7 @@ in {
grub = {
enable = true;
efiSupport = true;
device = "nodev";
devices = mkForce ["nodev"];
};
efi.canTouchEfiVariables = true;

View file

@ -45,7 +45,7 @@
};
};
};
extraDisks = builtins.listToAttrs (builtins.map (d: {
extraDisks = builtins.listToAttrs (map (d: {
name = d;
value = {
device = d;