nixos-config/modules/system/devices/boot/lanzaboote/default.nix

10 lines
252 B
Nix

{ config, lib, pkgs, lanzaboote, ... }:
{
imports = [ lanzaboote.nixosModules.lanzaboote ];
boot = lib.mkIf config.boot.lanzaboote.enable {
lanzaboote.pkiBundle = "/etc/secureboot";
};
environment.systemPackages = with pkgs; [ sbctl ];
}