2026-09-30 –, Loft
This talk will present the newest updates and advancements in NixOS related to Secure & Measured Boot. It will take a look at what we have achieved this far, what issues we have come across, what we would like to see from the ecosystem, and what we are working towards next. Additionally, it will go over some other exciting things that happened related to systemd in NixOS.
Key advancements:
- Support for Measured Boot via systemd-pcrlock in Lanzaboote (the boot security toolkit for NixOS)
- Support for Boot Counting in Lanzabooote
- Removed most patches from systemd (18 -> 6) and added a patch policy that prohibits most new patches.
- systemd initrd is now the default
Nixpkgs Maintainer
Co-Author of Lanzaboote, the Boot Security Toolkit for NixOS