r/NixOS • u/Koermit • 2d ago

Jovian-NixOS + enabled Secureboot?

I'm willing to get into the nitty gritty, but before throwing myself at the documentation, anyone running this? Is that even possible? Would like to spend my weekend on setting this up on a spare Handheld.

7 Upvotes

89% Upvoted

u/EvantheGrump 2d ago

It should absolutely be possible, jovian nixos doesn't really interact differently with secure boot or anything. I would say the main thing that may not work would be whatever bios the handheld has. Is it a steamdeck?

1

u/Koermit 2d ago

Actually, I do have the choice between a Legion Go and a MSI Claw A1M.. I skimmed a bit through their get started page and their GitHub and seems like I can rule the MAI Claw out, since it is a Intel Handheld.

I currently share my SteamDeck with my partner, I would Love to tinker with that too, but my life would be at risk.

2

u/EvantheGrump 2d ago

I understand that, lol. I've heard the legion go is a great console. Good luck!

1

u/Koermit 2d ago

Thank you! Might even report back !

1

u/ElvishJerricco 2d ago

Why would the Intel be ruled out?

1

u/Koermit 1d ago

After some consideration.. I decided that ruling things out because of better compatiblity is not my cup of tee, I will through the claw at this and tinker with it until it works or my spirit gets broken

u/Matheweh 2d ago

It should be possible with lanzaboote to have Secureboot, Jovian NixOS shouldn't affect that. But if you're running Jovian NixOS on a Steam Deck it might not be possible since the Secureboot settings are not exposed in the UEFI. Read about it here

2

u/ElvishJerricco 2d ago

Secure boot just isn't in the firmware menu. It's still exposed by UEFI perfectly normally to the OS. So you can still do enrollment and reset as usual with sbctl without issue. It's completely normal. I do this on mine.

1

u/Matheweh 2d ago

Cool! So it's just not in the UI?

1

u/Koermit 2d ago

Would be on a Legion Go or MSI Claw, but I will rule out the Intel Handheld for now

u/KeenanW 1d ago

I use Jovian on my HTPC/gaming box with SecureBoot and the Limine bootloader. There's nothing really special nix wise. The hard part is getting your motherboard in the correct provisioning state while also not locking yourself out. You can find my config here. modules/systems/secure-boot.nix has the actual usage of enabling SecureBoot while modules/hosts/nixos-htpc/jovian.nix has the jovian setup. The doc/ directory has my install instructions so you can see how I provision it.

u/jkotran 2d ago

Hi, I don't run with secure boot, but I wanted to share that Jovian has been outstanding for me. It's a better Steam OS for sure. Please donate to both NixOS and Jovian if you can spare the resources. They both deliver tremendous value and freedom.