system-profiles/lanzaboote.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14

{ flakeInputs, pkgs, ... }:
{
  imports = [
    flakeInputs.lanzaboote.nixosModules.lanzaboote
  ];

  config = {
    environment.systemPackages = [ pkgs.sbctl ];
    boot.lanzaboote = {
      enable = true;
      pkiBundle = "/var/lib/sbctl";
    };
  };
}