asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

ThinkPad T14 G2 AMD -> P14s G6 AMD

Browse source
This commit is contained in:
Sergei Poljanski 2026-05-07 17:55:07 +03:00
commit 5fbe4e306f
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
13 changed files with 226 additions and 62 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/security.nix
View file

@ -21,7 +21,10 @@
];
# Kernel Hardening
security.protectKernelImage = true;
# Disabled to allow hibernate (suspend-then-hibernate on P14s G6 AMD which has no S3).
# Hibernate image lives on LUKS-encrypted root, so the tamper window is the same as
# the LUKS threat boundary. Revisit if TPM-bound LUKS unlock gets set up.
security.protectKernelImage = false;
# Sysctl hardening
boot.kernel.sysctl = {