min
/
lanzaboote
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos: disable it and adapt it

This commit is contained in:
Raito Bezarius 2022-11-24 17:09:51 +01:00
parent 2148cb06ab
commit e75d892964
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
flake.nix
View File

@ -176,7 +176,7 @@
virtualisation = {
useBootLoader = true;
useEFIBoot = true;
useSecureBoot = true;
useSecureBoot = false;
};
boot.loader.efi = {

2
nix/lanzaboote.nix
View File

@ -40,7 +40,7 @@ in
mkdir -p /tmp/pki
cp -r ${cfg.pkiBundle}/* /tmp/pki
${sbctlWithPki}/bin/sbctl enroll-keys --yes-this-might-brick-my-machine
${cfg.package}/bin/lanzatool install ${cfg.publicKeyFile} ${cfg.privateKeyFile} "$@"
${cfg.package}/bin/lanzatool install --pki-bundle ${cfg.pkiBundle} --public-key ${cfg.publicKeyFile} --private-key ${cfg.privateKeyFile} "$@"
''}/bin/bootinstall";
# ${cfg.package}/bin/lanzatool install ${optionalString cfg.enrollKeys "--auto-enroll"} --pki-bundle ${cfg.pkiBundle}
};