feat: get win11 vms working w/ swtpm and secureboot

asimpson · Feb 19, 2022 · ab08fd8 · ab08fd8
1 parent ab67abf
commit ab08fd8
Showing 1 changed file with 18 additions and 6 deletions.
diff --git a/nixos/t480s/configuration.nix b/nixos/t480s/configuration.nix
@@ -281,13 +281,25 @@
     };
   };
 
-  virtualisation.libvirtd.enable = true;
-  virtualisation.libvirtd.qemu.runAsRoot = true;
-  virtualisation.libvirtd.qemu.package = pkgs.qemu_kvm;
+  virtualisation = {
+    libvirtd.enable = true;
+    libvirtd.qemu = {
+      package = pkgs.qemu_kvm;
+      runAsRoot = true;
+      swtpm.enable = true;
+      ovmf = {
+        enable = true;
+        package = (pkgs.OVMFFull.override {
+          secureBoot = true;
+          tpmSupport = true;
+        });
+      };
+    };
 
-  virtualisation.docker = {
-    enable = true;
-    autoPrune.enable = true;
+    docker = {
+      enable = true;
+      autoPrune.enable = true;
+    };
   };
 
   security.pam = {