From 5212255fa1d10cbd17cb9841ca0611b0ecc91922 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Fri, 18 Jul 2025 19:20:28 +0200
Subject: lanzaboote

---
 system-profiles/lanzaboote.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 system-profiles/lanzaboote.nix

(limited to 'system-profiles')

diff --git a/system-profiles/lanzaboote.nix b/system-profiles/lanzaboote.nix
new file mode 100644
index 00000000..f1e179cf
--- /dev/null
+++ b/system-profiles/lanzaboote.nix
@@ -0,0 +1,14 @@
+{ flakeInputs, pkgs, ... }:
+{
+  imports = [
+    flakeInputs.lanzaboote.nixosModules.lanzaboote
+  ];
+
+  config = {
+    environment.systemPackages = [ pkgs.sbctl ];
+    boot.lanzaboote = {
+      enable = true;
+      pkiBundle = "/var/lib/sbctl";
+    };
+  };
+}
-- 
cgit v1.2.3