hv: enable UEFI secure boot

1 files changed, 23 insertions, 1 deletions

diff --git a/flake.nix b/flake.nix
index 44a7d70..c4a7b18 100644
--- a/flake.nix
+++ b/flake.nix
@@ -21,10 +21,32 @@
         nixpkgs-ovmf.follows = "nixpkgs";
       };
     };
+
+    flake-utils.url = "github:numtide/flake-utils";
+
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote/v0.4.1";
+
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        flake-utils.follows = "flake-utils";
+        pre-commit-hooks-nix.follows = "";
+      };
+    };
   };
 
   outputs =
-    flakes@{ self, nixpkgs, unstable, home-manager, nur, impermanence, hm-isolation, nixvirt }:
+    flakes@{ self
+    , nixpkgs
+    , unstable
+    , home-manager
+    , nur
+    , impermanence
+    , hm-isolation
+    , nixvirt
+    , flake-utils
+    , lanzaboote
+    }:
     let
       system = "x86_64-linux";