From bd37aaa161a2d883acd4f380517779f5a293a862 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Fri, 19 Aug 2022 19:55:03 +0100
Subject: [PATCH] porcorosso: enable swtpm and secure boot OVMF

---
 ops/nixos/porcorosso/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ops/nixos/porcorosso/default.nix b/ops/nixos/porcorosso/default.nix
index ee551385d7..5a7d937ce4 100644
--- a/ops/nixos/porcorosso/default.nix
+++ b/ops/nixos/porcorosso/default.nix
@@ -113,6 +113,12 @@ in {
   # Enable libvirtd.
   virtualisation.libvirtd = {
     enable = true;
+    qemu = {
+      swtpm.enable = true;
+      ovmf.packages = [
+        pkgs.OVMFFull.fd
+      ];
+    };
   };
   security.polkit.enable = true;