1{
2 config,
3 lib,
4 pkgs,
5 ...
6}:
7
8let
9 cfg = config.programs.sedutil;
10
11in
12{
13 options.programs.sedutil.enable = lib.mkEnableOption "sedutil, to manage self encrypting drives that conform to the Trusted Computing Group OPAL 2.0 SSC specification";
14
15 config = lib.mkIf cfg.enable {
16 boot.kernelParams = [
17 "libata.allow_tpm=1"
18 ];
19
20 environment.systemPackages = with pkgs; [ sedutil ];
21 };
22}