2025-01-28 18:24:07 -05:00

21 lines
312 B
Nix

{
config,
lib,
...
}:
let
cfg = config.nmasur.profiles.no-mitigations;
in
{
options.nmasur.profiles.no-mitigations.enable = lib.mkEnableOption "remove Kernel CPU mitigations";
config = lib.mkIf cfg.enable {
# WARNING: This is not secure
boot.kernelParams = [ "mitigations=off" ];
};
}