sys: prepare impermanence declarations in advance of [lustrated]'s transition

1 files changed, 9 insertions, 0 deletions

diff --git a/sys/boot/firmware.nix b/sys/boot/firmware.nix
index b3598a7..0e024f1 100644
--- a/sys/boot/firmware.nix
+++ b/sys/boot/firmware.nix
@@ -28,6 +28,15 @@ in {
       enableRedistributableFirmware = true;
     };
 
+    local.boot.impermanence.directories = [
+      {
+        directory = "/var/lib/fwupd";
+        user = "fwupd-refresh";
+        group = "fwupd-refresh";
+        mode = "u=rwx,g=rx,o=rx";
+      }
+    ];
+
     services.fwupd.enable = true;
   };
 }