{"guid":"f00ce030-06a4-5753-a902-837a0acc2aa6","title":"Measured Boot in NixOS \u0026 Other systemd Updates","subtitle":null,"slug":"all-systems-go-2026-391-measured-boot-in-nixos-other-systemd-updates","link":"https://cfp.all-systems-go.io/all-systems-go-2026/talk/QDB7AL/","description":"This talk will present the newest updates and advancements in NixOS related to Secure \u0026 Measured Boot. It will take a look at what we have achieved this far, what issues we have come across, what we would like to see from the ecosystem, and what we are working towards next. Additionally, it will go over some other exciting things that happened related to systemd in NixOS.\n\nKey advancements:\n- [Support for Measured Boot via systemd-pcrlock in Lanzaboote](https://github.com/nix-community/lanzaboote/pull/564) (the boot security toolkit for NixOS)\n- [Support for Boot Counting in Lanzabooote](https://github.com/nix-community/lanzaboote/pull/477)\n- [Removed most patches from systemd (18 -\u003e 6)](https://github.com/NixOS/nixpkgs/pull/488508) and added a patch policy that prohibits most new patches.\n- [systemd initrd is now the default](https://github.com/NixOS/nixpkgs/pull/435781)\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/de/","original_language":"eng","persons":["Niklas Sturm"],"view_count":14,"promoted":false,"date":"2026-09-30T12:25:00.000+02:00","release_date":"2026-09-30T00:00:00.000+02:00","updated_at":"2026-09-30T19:30:04.323+02:00","tags":["391","2026","asg2026","Loft","asg2026-eng","asg2026","Day 1"],"length":1439,"duration":1439,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2026/391-f00ce030-06a4-5753-a902-837a0acc2aa6.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2026/391-f00ce030-06a4-5753-a902-837a0acc2aa6_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2026/391-f00ce030-06a4-5753-a902-837a0acc2aa6.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2026/391-f00ce030-06a4-5753-a902-837a0acc2aa6.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/all-systems-go-2026-391-measured-boot-in-nixos-other-systemd-updates","url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_title":"All Systems Go! 2026","conference_url":"https://api.media.ccc.de/public/conferences/asg2026","related":[],"recordings":[{"length":1439,"mime_type":"video/mp4","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-30T15:04:35.707+02:00","label":"eng 1080p","size":75,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/h264-hd/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_hd.mp4","url":"https://api.media.ccc.de/public/recordings/105615","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"audio/opus","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-30T15:06:11.065+02:00","label":"eng","size":14,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/opus/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_opus.opus","url":"https://api.media.ccc.de/public/recordings/105619","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"video/mp4","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-30T15:08:54.903+02:00","label":"eng 576p","size":39,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/h264-sd/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_sd.mp4","url":"https://api.media.ccc.de/public/recordings/105621","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"audio/mpeg","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-30T15:09:34.303+02:00","label":"eng","size":22,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/mp3/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/105622","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-30T15:11:23.690+02:00","label":"eng 1080p","size":82,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/av1-hd/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/105623","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_av1-sd.webm","state":"new","folder":"av1-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-30T15:13:19.573+02:00","label":"eng 576p","size":42,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/av1-sd/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_av1-sd.webm","url":"https://api.media.ccc.de/public/recordings/105624","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"video/webm","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-30T15:23:30.224+02:00","label":"eng 1080p","size":110,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/webm-hd/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/105626","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"},{"length":1439,"mime_type":"video/webm","language":"eng","filename":"asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-30T15:36:13.185+02:00","label":"eng 576p","size":51,"recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2026/webm-sd/asg2026-391-eng-Measured_Boot_in_NixOS_Other_systemd_Updates_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/105629","event_url":"https://api.media.ccc.de/public/events/f00ce030-06a4-5753-a902-837a0acc2aa6","conference_url":"https://api.media.ccc.de/public/conferences/asg2026"}]}