feat: add samsung Galaxy Book6 EE (PVAP) hardware profile and fixes

examples/basic/default.nix

@@ -9,25 +9,26 @@
   mainDisk ? "/dev/nvme0n1",
 }:
 let
-  securix = import securix {
+   securixPkgs = import securix {
     edition = "my-team";
     defaultTags = [ "my-team" ];
-    inherit mainDisk pkgs;
+  inherit pkgs;
   };
   inherit (pkgs) lib;
 in
 rec {
-  users = securix.lib.readInventory ./inventory;
+  users = securixPkgs.lib.readInventory ./inventory;
   vpn-profiles = import ./vpn-profiles { inherit lib; };
   # Base system is provided.
-  terminals = securix.lib.mkTerminals users vpn-profiles (
+ terminals = securixPkgs.lib.mkTerminals { inherit users vpn-profiles; edition = "my-team"; } (
     { lib, ... }:
     {
       imports = [
         # Any custom module here...
       ];
 
       securix = {
+  self.mainDisk = mainDisk;
         # Le terminal est multi-opérateur
         users.allowAnyOperator = true;
 
@@ -54,5 +55,5 @@ rec {
     }
   );
 
-  docs = securix.lib.mkDocs { inherit users terminals vpn-profiles; };
+  docs = securixPkgs.lib.mkDocs { inherit users terminals vpn-profiles; };
 }

hardware/default.nix

@@ -10,6 +10,8 @@
     ./p14sg6.nix
     ./t14g6.nix
     ./x13-20ug.nix
+    ./qemu-vm.nix
+    ./galaxybook6-pvap.nix
     ./x280.nix
     ./x390.nix
     ./x9-15.nix

hardware/galaxybook6-pvap.nix

@@ -0,0 +1,56 @@
+# SPDX-FileCopyrightText: 2026 Contributors
+# SPDX-License-Identifier: MIT
+#
+# Samsung Galaxy Book6 Enterprise Edition — Model PVAP
+# CPU: Intel Core Ultra 5 325 (Panther Lake)
+
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+let
+  inherit (lib) mkIf;
+in
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  config = mkIf (config.securix.self.machine.hardwareSKU == "galaxybook6-pvap") {
+
+    boot.initrd.availableKernelModules = [
+      "xhci_pci"
+      "thunderbolt"
+      "nvme"
+      "usb_storage"
+      "sd_mod"
+      "i2c_designware_platform"
+      "i2c_hid_acpi"
+    ];
+
+    boot.initrd.kernelModules = [ ];
+
+    boot.kernelModules = [
+      "kvm-intel"
+      "samsung-galaxybook"
+    ];
+
+    boot.extraModulePackages = [ ];
+
+    boot.kernelParams = [
+      "i8042.nopnp"
+      "i8042.reset"
+      "i8042.probe_defer"
+    ];
+
+    hardware.firmware = [
+      pkgs.linux-firmware
+      pkgs.wireless-regdb
+    ];
+
+    nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+    powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+    hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  };
+}

modules/anssi/preboot.nix

@@ -120,9 +120,7 @@
       };
     };
 
-    config = _: {
-      # TODO: grub or systemd-boot password
-    };
+    config = _: { boot.loader.systemd-boot.editor = false; };
 
     checkScript =
       pkgs:
@@ -141,9 +139,7 @@
 
     # implementations.secureboot = { checkScript = {}; depends = [ "R3" ]; };
 
-    config = _: {
-      # TODO
-    };
+    config = _: { boot.loader.systemd-boot.editor = false; };
 
     checkScript =
       pkgs:

modules/self.nix

@@ -154,6 +154,10 @@ in
         description = "Numéro d'inventaire du système";
         example = 123456;
       };
+      inventoryID = mkOption {
+        type = types.nullOr types.int;
+        default = null;
+      };
 
       hardwareSKU = mkOption {
         type = types.enum [
@@ -164,6 +168,8 @@ in
           "x9-15"
           "e14-g7"
           "x13-20ug"
+          "qemu-vm"
+          "galaxybook6-pvap"
           "p14sg6"
         ];
         description = "Identifiant de configuration du matériel";

modules/vpn/default.nix

@@ -1,11 +1,15 @@
 # SPDX-FileCopyrightText: 2025 Ryan Lahfa <ryan.lahfa.ext@numerique.gouv.fr>
 #
 # SPDX-License-Identifier: MIT
+{ lib, ... }: {
 
-{
   imports = [
     ./ipsec
     ./netbird
     ./wireguard
   ];
+  options.securix.vpn.enable = lib.mkOption {
+    type = lib.types.bool;
+    default = false;
+  };
 }