Options

appstream.enable

Whether to install files to support the [AppStream metadata specification](https://www.freedesktop.org/software/appstream/docs/index.html).

boot.bcache.enable

Whether to enable bcache mount support.

boot.bcachefs.package

The bcachefs-tools package to use. This package should also provide a passthru 'kernelModule' attribute to build the out-of-tree kernel module.

boot.binfmt.addEmulatedSystemsToNixSandbox

Whether to add the {option}`boot.binfmt.emulatedSystems` to {option}`nix.settings.extra-platforms`. Disable this to use remote builders for those platforms, while allowing testing binaries locally.

boot.binfmt.emulatedSystems

List of systems to emulate. Will also configure Nix to support your new systems. Warning: the builder can execute all emulated systems within the same build, which introduces impurities in the case of cross compilation.

boot.binfmt.preferStaticEmulators

Whether to use static emulators when available. This enables the kernel to preload the emulator binaries when the binfmt registrations are added, obviating the need to make the emulator binaries available inside chroots and chroot-like sandboxes.

boot.binfmt.registrations

Extra binary formats to register with the kernel. See <https://www.kernel.org/doc/html/latest/admin-guide/binfmt-misc.html> for more details.

boot.binfmt.registrations.<name>.fixBinary

Whether to open the interpreter file as soon as the registration is loaded, rather than waiting for a relevant file to be invoked. See the description of the 'F' flag in the kernel docs for more details.

boot.binfmt.registrations.<name>.interpreter

The interpreter to invoke to run the program. Note that the actual registration will point to /run/binfmt/${name}, so the kernel interpreter length limit doesn't apply.

boot.binfmt.registrations.<name>.magicOrExtension

The magic number or extension to match on.

boot.binfmt.registrations.<name>.mask

A mask to be ANDed with the byte sequence of the file before matching

boot.binfmt.registrations.<name>.matchCredentials

Whether to launch with the credentials and security token of the binary, not the interpreter (e.g. setuid bit). See the description of the 'C' flag in the kernel docs for more details. Implies/requires openBinary = true.

boot.binfmt.registrations.<name>.offset

The byte offset of the magic number used for recognition.

boot.binfmt.registrations.<name>.openBinary

Whether to pass the binary to the interpreter as an open file descriptor, instead of a path.

boot.binfmt.registrations.<name>.preserveArgvZero

Whether to pass the original argv[0] to the interpreter. See the description of the 'P' flag in the kernel docs for more details;

boot.binfmt.registrations.<name>.recognitionType

Whether to recognize executables by magic number or extension.

boot.binfmt.registrations.<name>.wrapInterpreterInShell

Whether to wrap the interpreter in a shell script. This allows a shell command to be set as the interpreter.

boot.blacklistedKernelModules

Set of names of kernel modules that should not be loaded automatically by the hardware probing code. This can either be a list of modules or an attrset. In an attrset, names that are set to `true` represent modules that will be blacklisted.

boot.bootspec.enableValidation

Whether to enable the validation of bootspec documents for each build. This will introduce Go in the build-time closure as we are relying on [Cuelang](https://cuelang.org/) for schema validation. Enable this option if you want to ascertain that your documents are correct .

boot.bootspec.extensions

User-defined data that extends the bootspec document. To reduce incompatibility and prevent names from clashing between applications, it is **highly recommended** to use a unique namespace for your extensions.

Options - 24041