re-ship linux 6.7 to lappy/desko/servo
now that landlock-sandboxer builds against the correct linux headers, this can actually work.
This commit is contained in:
parent
4f352c5725
commit
a9810e7343
|
@ -8,6 +8,11 @@
|
|||
"nvme" # to boot from nvme devices
|
||||
# efi_pstore evivars
|
||||
];
|
||||
# moby has to run recent kernels (defined elsewhere).
|
||||
# meanwhile, kernel variation plays some minor role in things like sandboxing (landlock) and capabilities.
|
||||
# simpler to keep near the latest kernel on all devices,
|
||||
# and also makes certain that any weird system-level bugs i see aren't likely to be stale kernel bugs.
|
||||
boot.kernelPackages = lib.mkDefault (pkgs.linuxPackagesFor pkgs.linux_latest);
|
||||
|
||||
hardware.cpu.amd.updateMicrocode = true; # desktop
|
||||
hardware.cpu.intel.updateMicrocode = true; # laptop
|
||||
|
|
Loading…
Reference in New Issue
Block a user