at 24.11-pre 402 B view raw
1{ config, lib, pkgs, ... }: 2 3let 4 cfg = config.programs.sedutil; 5 6in { 7 options.programs.sedutil.enable = lib.mkEnableOption "sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification"; 8 9 config = lib.mkIf cfg.enable { 10 boot.kernelParams = [ 11 "libata.allow_tpm=1" 12 ]; 13 14 environment.systemPackages = with pkgs; [ sedutil ]; 15 }; 16}