testing lanzaboote

2024-06-30 10:38:14 +02:00
parent 06c3442ea3
commit ca9d5f5f79
5 changed files with 236 additions and 2 deletions
--- a/hosts/cnix/default.nix
+++ b/hosts/cnix/default.nix
@@ -69,9 +69,13 @@ in {

  # Bootloader
  boot.loader = {
-    systemd-boot.enable = true;
+    systemd-boot.enable = lib.mkForce false;
    efi.canTouchEfiVariables = true;
  };
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/etc/secureboot";
+  };
  # Enable networking
  networking = {
    networkmanager.enable = true;
--- a/hosts/core/default.nix
+++ b/hosts/core/default.nix
@@ -33,8 +33,10 @@
  environment = {
    localBinInPath = true;
    systemPackages = [
-      # Dev
+      # Core
      pkgs.git
+      pkgs.sbctl
+      pkgs.niv

      # Util
      pkgs.stow