Nixos no longer boots since kernel 6.17 #449939
Description
I'm running nixos-unstable with Lanzaboote/systemd-boot. After updating the kernel to 6.17 or newer, boot fails after selecting the new generation, with no further output. The latest known working version is kernel 6.16.11, just built some minutes ago.
Disabling secureboot only causes one more log line to be printed by the stub, telling me that secure boot is disabled.
After that:
- no more output
- system appears frozen, with usb no longer working (keyboard disconnected)
- There's no journal for the attempted boot
Booting an older generation works.
Using nixos-rebuild build-vm also seems to work - I think it might also simply not use systemd-boot.
Attaching output possibly relevant:
fileSystems = {
"/" = {
device = "/dev/disk/by-uuid/a0a11869-5de8-4a71-95cc-46cdc207c1d7";
fsType = "btrfs";
};
"/boot" = {
device = "/dev/disk/by-uuid/13AE-1DAE";
fsType = "vfat";
options = ["fmask=0022" "dmask=0022"];
};
};
swapDevices = [
{
device = "/var/lib/swapfile";
size = 16 * 1024;
options = ["discard"];
}
];
boot = {
initrd = {
availableKernelModules = ["sd_mod" "sr_mod"];
kernelModules = ["lz4"];
luks.devices."crypted".device = "/dev/disk/by-uuid/c7d11b07-5448-42d3-a861-4d53ae58b563";
systemd.enable = true;
};
kernelParams = [
"zswap.enabled=1" # enables zswap
"zswap.compressor=lz4" # compression algorithm
"zswap.max_pool_percent=20" # maximum percentage of RAM that zswap is allowed to use
"zswap.shrinker_enabled=1" # whether to shrink the pool proactively on high memory pressure
];
kernel.sysctl = {
"vm.swappiness" = 10;
};
# kernelPackages = pkgs.linuxPackages_6_16;
kernelPackages = pkgs.linuxPackages_latest;
extraModulePackages = [];
supportedFilesystems = ["ntfs"];
loader = {
systemd-boot.enable = true;
systemd-boot.configurationLimit = 16;
efi.canTouchEfiVariables = true;
};
binfmt.emulatedSystems = ["aarch64-linux"];
binfmt.preferStaticEmulators = true; # Make it work with Docker
};flo@monster ~> bootctl status --no-pager
System:
Firmware: UEFI 2.70 (American Megatrends 5.17)
Firmware Arch: x64
Secure Boot: enabled (user)
TPM2 Support: yes
Measured UKI: yes
Boot into FW: supported
Current Boot Loader:
Product: systemd-boot 257.9
Features: ✓ Boot counting
✓ Menu timeout control
✓ One-shot menu timeout control
✓ Default entry control
✓ One-shot entry control
✓ Support for XBOOTLDR partition
✓ Support for passing random seed to OS
✓ Load drop-in drivers
✓ Support Type #1 sort-key field
✓ Support @saved pseudo-entry
✓ Support Type #1 devicetree field
✓ Enroll SecureBoot keys
✓ Retain SHIM protocols
✓ Menu can be disabled
✓ Multi-Profile UKIs are supported
✓ Boot loader set partition information
Partition: /dev/disk/by-partuuid/2252f6d0-65e3-4517-8cb5-e3d4efccc573
Loader: └─/EFI/BOOT/BOOTX64.EFI
Current Entry: nixos-generation-173-nzqbvj6kvidkbbdlfikr5nvzizzfbc6hvqkii5ijqufxhvt5rfgq.efi
Current Stub:
Product: lanzastub 0.4.2
Features: ✓ Stub sets loader partition information
✗ Picks up credentials from boot partition
✗ Picks up system extension images from boot partition
✗ Picks up configuration extension images from boot partition
✗ Measures kernel+command line+sysexts
✗ Support for passing random seed to OS
✗ Pick up .cmdline from addons
✗ Pick up .cmdline from SMBIOS Type 11
✗ Pick up .dtb from addons
✗ Stub understands profile selector
✗ Stub sets stub partition information
✗ Stub loader set partition information
Random Seed:
System Token: set
Exists: yes
Available Boot Loaders on ESP:
ESP: /boot (/dev/disk/by-partuuid/2252f6d0-65e3-4517-8cb5-e3d4efccc573)
File: ├─/EFI/systemd/systemd-bootx64.efi (systemd-boot 257.9)
└─/EFI/BOOT/BOOTX64.EFI (systemd-boot 257.9)
Boot Loaders Listed in EFI Variables:
Title: UEFI OS
ID: 0x0011
Status: active, boot-order
Partition: /dev/disk/by-partuuid/2252f6d0-65e3-4517-8cb5-e3d4efccc573
File: └─/EFI/BOOT/BOOTX64.EFI
Title: Windows Boot Manager
ID: 0x0001
Status: active, boot-order
Partition: /dev/disk/by-partuuid/a016f24b-2503-45ea-8a44-4dd0665f0fc0
File: └─/EFI/MICROSOFT/BOOT/BOOTMGFW.EFI
Boot Loader Entries:
$BOOT: /boot (/dev/disk/by-partuuid/2252f6d0-65e3-4517-8cb5-e3d4efccc573)
token: nixos
Default Boot Loader Entry:
type: Boot Loader Specification Type #2 (.efi)
title: NixOS Xantusia 25.11.20251007.c9b6fb7 (Linux 6.16.11) (Generation 173, 2025-10-08)
id: nixos-generation-173-nzqbvj6kvidkbbdlfikr5nvzizzfbc6hvqkii5ijqufxhvt5rfgq.efi
source: /boot//EFI/Linux/nixos-generation-173-nzqbvj6kvidkbbdlfikr5nvzizzfbc6hvqkii5ijqufxhvt5rfgq.efi (on the EFI System Partition)
sort-key: lanza
version: Generation 173, 2025-10-08
linux: /boot//EFI/Linux/nixos-generation-173-nzqbvj6kvidkbbdlfikr5nvzizzfbc6hvqkii5ijqufxhvt5rfgq.efi
options: init=/nix/store/7b77fdsy51qps5iv114la36a4knkbrpx-nixos-system-monster-25.11.20251007.c9b6fb7/init amd_pstate=active zswap.enabled=1 zswap.compressor=lz4 zswap.max_pool_percent=20 zswap.shrinker_enabled=1 psi=1 root=fstab loglevel=4 lsm=landlock,yama,bpf nvidia-drm.modeset=1 nvidia-drm.fbdev=1
flo@monster ~> nix-shell -p nix-info --run "nix-info -m"
- system: `"x86_64-linux"`
- host os: `Linux 6.16.11, NixOS, 25.11 (Xantusia), 25.11.20251007.c9b6fb7`
- multi-user?: `yes`
- sandbox: `yes`
- version: `nix-env (Nix) 2.31.2`
- channels(root): `"nixos-24.05"`
- nixpkgs: `/nix/store/npsan903n6s1f30nrip3fvqkmx8fxwgg-source`
I can provide a full system config - once I'm done cleaning it up.
Happy to assist with whatever you need.
If that's not a nixos issue, I'd be happy to forward this to the lkml.