schmittlauch/nixconfigs
2
0
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity

enable secure boot wit Lanzaboote

Browse source
This commit is contained in:
Trolli Schmittlauch 2023-08-17 17:26:57 +02:00
parent c1d12186f2
commit 072fc2b6af
3 changed files with 263 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

11
flake.nix
View file

@ -9,7 +9,12 @@
url = "github:nix-community/home-manager/release-23.05";
inputs.nixpkgs.follows = "nixpkgs";
};
nur.url = "github:nix-community/NUR";
lanzaboote = {
url = "github:nix-community/lanzaboote/v0.3.0";
# deliberately do _not_ follow the nixpkgs input here, because paranoia and test coverage
};
nur.url = "github:nix-community/NUR";
# TODO: possible make this a flake as well
mysecrets = {
flake = false;
@ -19,7 +24,7 @@
};
outputs =
{ self, nixpkgs, nur, ... }@inputs:
{ self, nixpkgs, nur, lanzaboote, ... }@inputs:
let
system = "x86_64-linux";
pkgs = nixpkgs.legacyPackages.${system};
@ -28,7 +33,7 @@
nixosConfigurations.thinknix = nixpkgs.lib.nixosSystem {
inherit system;
modules = [ ./nixos/configuration.nix ];
modules = [ ./nixos/configuration.nix lanzaboote.nixosModules.lanzaboote ];
# necessary to make the top-level inputs available to system configuration
specialArgs = {
#TODO: for system, consider moving to flake-utils