fix: disable lanzaboote completely on adrastea

flake.nix

@@ -117,7 +117,7 @@
 
             catppuccin.nixosModules.catppuccin
             lix-module.nixosModules.default
-            lanzaboote.nixosModules.lanzaboote
+            # lanzaboote.nixosModules.lanzaboote
             home-manager.nixosModules.home-manager
             {
               home-manager.useGlobalPkgs = true;
@@ -129,6 +129,7 @@
                   ./users/youwen/linux/packages/x86_64
                   ./users/youwen/linux/programs
                   ./users/youwen/common
+                  ./hosts/adrastea/home-manager-overrides.nix
                   inputs.catppuccin.homeManagerModules.catppuccin
                 ];
               };

hosts/adrastea/default.nix

@@ -18,17 +18,34 @@
     # generated at installation time. So we force it to false
     # for now.
     systemd-boot = {
-      enable = false;
+      enable = true;
       consoleMode = "auto";
     };
   };
 
-  boot.lanzaboote = {
+  # boot.lanzaboote = {
+  #   enable = false;
+  #   pkiBundle = "/etc/secureboot";
+  # };
+
+  services.keyd = {
     enable = true;
-    pkiBundle = "/etc/secureboot";
+    keyboards = {
+      default = {
+        ids = [ "*" ];
+        settings = {
+          main = {
+            capslock = "esc";
+            leftalt = "leftcontrol";
+            leftcontrol = "leftalt";
+          };
+        };
+      };
+    };
   };
 
-  boot.initrd.luks.devices."luks-af320a0f-b388-43f5-b5a3-af2b47cfc716".device = "/dev/disk/by-uuid/af320a0f-b388-43f5-b5a3-af2b47cfc716";
+  boot.initrd.luks.devices."luks-52d1be6d-b32f-41e0-a6d7-2ff52599fe7c".device =
+    "/dev/disk/by-uuid/52d1be6d-b32f-41e0-a6d7-2ff52599fe7c";
 
   networking.hostName = "adrastea"; # Define your hostname.
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
@@ -78,6 +95,14 @@
     powerManagement.finegrained = false;
     open = false;
     nvidiaSettings = true;
+    prime = {
+      amdgpuBusId = "PCI:4:0:0";
+      nvidiaBusId = "PCI:1:0:0";
+      offload = {
+        enable = true;
+        enableOffloadCmd = true;
+      };
+    };
   };
 
   hardware.graphics.enable = true;

hosts/adrastea/hardware-configuration.nix

@@ -0,0 +1,43 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  boot.initrd.availableKernelModules =
+    [ "nvme" "xhci_pci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/01983a52-5693-4cda-ad2e-5a406776bfb9";
+    fsType = "ext4";
+  };
+
+  boot.initrd.luks.devices."luks-f169a679-d70b-4dff-a344-7131f3303813".device =
+    "/dev/disk/by-uuid/f169a679-d70b-4dff-a344-7131f3303813";
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/3FCB-9D60";
+    fsType = "vfat";
+    options = [ "fmask=0022" "dmask=0022" ];
+  };
+
+  swapDevices =
+    [{ device = "/dev/disk/by-uuid/f28d0752-feab-4591-899e-e5deac3712d0"; }];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp4s0f3u2.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/adrastea/home-manager-overrides.nix

@@ -0,0 +1,4 @@
+{ pkgs, ... }:
+{
+  wayland.windowManager.hyprland.settings.monitor = pkgs.lib.mkForce [ "eDP-1,2560x1440@165,0x0,1.6" ];
+}