MyNixOS website logo
option

boot.loader.grub.users

User accounts for GRUB. When specified, the GRUB command line and all boot options except the default are password-protected. All passwords and hashes provided will be stored in /boot/grub/grub.cfg, and will be visible to any local user who can read this file. Additionally, any passwords and hashes provided directly in a Nix configuration (as opposed to external files) will be copied into the Nix store, and will be visible to all local users.

Declarations
Type
attribute set of (submodule)
Default
{ }
Example
{
  root = {
    hashedPasswordFile = "/path/to/file";
  };
}