1{ config, lib, pkgs, ... }:
2
3let
4 cfg = config.programs.sedutil;
5
6in {
7 options.programs.sedutil.enable = lib.mkEnableOption "sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification";
8
9 config = lib.mkIf cfg.enable {
10 boot.kernelParams = [
11 "libata.allow_tpm=1"
12 ];
13
14 environment.systemPackages = with pkgs; [ sedutil ];
15 };
16}