at 25.11-pre 410 B view raw
1{ 2 config, 3 lib, 4 pkgs, 5 ... 6}: 7 8let 9 cfg = config.programs.sedutil; 10 11in 12{ 13 options.programs.sedutil.enable = lib.mkEnableOption "sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification"; 14 15 config = lib.mkIf cfg.enable { 16 boot.kernelParams = [ 17 "libata.allow_tpm=1" 18 ]; 19 20 environment.systemPackages = with pkgs; [ sedutil ]; 21 }; 22}