Add initial grub

modules/system/devices/boot/default.nix

@@ -2,6 +2,7 @@
 {
   imports = [
     ./extlinux
+    ./grub
     ./lanzaboote
     ./plymouth
     ./services

modules/system/devices/boot/grub/default.nix

@@ -0,0 +1,11 @@
+{ config, lib, ... }:
+{
+  boot.loader = lib.mkIf config.boot.loader.grub.enable {
+    grub = {
+      efiSupport = true;
+      efiInstallAsRemovable = true;
+      device = "nodev";
+    };
+    efi.canTouchEfiVariables = false;
+  };
+}