14 lines
333 B
Nix
14 lines
333 B
Nix
{ config, pkgs, lanzaboote, ... }:
|
|
{
|
|
imports = [ lanzaboote.nixosModules.lanzaboote ];
|
|
|
|
boot.lanzaboote.pkiBundle = "/etc/secureboot";
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [ sbctl ];
|
|
persistence."/persist".directories = [{
|
|
directory = config.boot.lanzaboote.pkiBundle;
|
|
mode = "0700";
|
|
}];
|
|
};
|
|
}
|