min
/
lanzaboote
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

flake.nix: apply suggestions from statix

This commit is contained in:
nikstur 2022-12-25 15:46:41 +01:00
parent eb9b1bbbe3
commit e90262608e
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
flake.nix
View File

@ -30,7 +30,7 @@
]; ];
}; };
lib = pkgs.lib; inherit (pkgs) lib;
rust-nightly = pkgs.rust-bin.fromRustupToolchainFile ./rust/lanzaboote/rust-toolchain.toml; rust-nightly = pkgs.rust-bin.fromRustupToolchainFile ./rust/lanzaboote/rust-toolchain.toml;
craneLib = crane.lib.x86_64-linux.overrideToolchain rust-nightly; craneLib = crane.lib.x86_64-linux.overrideToolchain rust-nightly;
@ -204,7 +204,7 @@
lanzaboote-boot-under-sd-stage1 = mkSecureBootTest { lanzaboote-boot-under-sd-stage1 = mkSecureBootTest {
name = "signed-files-boot-under-secureboot-systemd-stage-1"; name = "signed-files-boot-under-secureboot-systemd-stage-1";
machine = { ... }: { machine = _: {
boot.initrd.systemd.enable = true; boot.initrd.systemd.enable = true;
}; };
testScript = '' testScript = ''
@ -222,9 +222,9 @@
# which should exist IF lanzatool do the right thing. # which should exist IF lanzatool do the right thing.
lanzaboote-with-initrd-secrets = mkSecureBootTest { lanzaboote-with-initrd-secrets = mkSecureBootTest {
name = "signed-files-boot-with-secrets-under-secureboot"; name = "signed-files-boot-with-secrets-under-secureboot";
machine = { ... }: { machine = _: {
boot.initrd.secrets = { boot.initrd.secrets = {
"/etc/iamasecret" = (pkgs.writeText "iamsecret" "this is a very secure secret"); "/etc/iamasecret" = pkgs.writeText "iamsecret" "this is a very secure secret";
}; };
boot.initrd.preDeviceCommands = '' boot.initrd.preDeviceCommands = ''