36c0a13c4c
lanzaboote module: remove --pki-bundle option
2022-12-10 18:11:23 +01:00
c9f9f1c52a
nixos/lanzaboote: pkiBundle is not actual optional
...
the installHook needs it.
2022-12-08 21:26:17 +01:00
28bb93c5f3
nix: switch everything to crane and drop naersk
2022-11-28 14:01:35 +01:00
0a96623461
lanzatool: bootspec from generation
...
The bootspec is now read from each generation so that more than one
entry can be generated when calling install
2022-11-26 22:27:44 +01:00
95f596f4dc
lanzatool: add support for generations and correct naming of kernels a… ( #12 )
...
* lanzatool: add support for generations and correct naming of kerels and initrds
* test: use convert_to_esp(extract_bspec_attr(⋅)) for unsigned tests
* lanzatool: ryan is a B class engineer
Co-authored-by: nikstur@outlook.com
2022-11-26 03:14:21 +01:00
9f65f75289
feature: support initrd secrets
2022-11-26 02:01:41 +01:00
a99646bb01
nixos: enrollment is optional
2022-11-25 11:29:56 +01:00
e75d892964
nixos: disable it and adapt it
2022-11-24 17:09:51 +01:00
2148cb06ab
nixos: actually enable sb
2022-11-24 17:07:06 +01:00
ccdd02bf1c
nixos: add a lanzaboote module
...
- Wire up things with Bootspec & External bootloaders
- Introduce SecureBoot keys
2022-11-24 17:07:05 +01:00
c53477fbf5
nixos: add a lanzaboote module
2022-11-24 16:59:59 +01:00
bcad59a20a
Move uefi-run into its own Nix file
2022-11-22 00:43:15 +01:00
nikstur