summaryrefslogtreecommitdiff
path: root/sys/boot/sb.nix
diff options
context:
space:
mode:
authorAlejandro Soto <alejandro@34project.org>2025-07-23 20:37:33 -0600
committerAlejandro Soto <alejandro@34project.org>2025-07-23 20:37:33 -0600
commit7a6f4790282d001e2c7adbdaa4806f8beed02ddb (patch)
tree59e4bd556c6d868afc68cab45c58631b39963da5 /sys/boot/sb.nix
parent9d01e6dd2213dccd566c6204bd81465d3da68e46 (diff)
sys/boot: rename sb.nix -> secure-boot.nix
Diffstat (limited to 'sys/boot/sb.nix')
-rw-r--r--sys/boot/sb.nix37
1 files changed, 0 insertions, 37 deletions
diff --git a/sys/boot/sb.nix b/sys/boot/sb.nix
deleted file mode 100644
index bdf7f0f..0000000
--- a/sys/boot/sb.nix
+++ /dev/null
@@ -1,37 +0,0 @@
-{ config, lib, pkgs, ... }:
-with lib; let
- cfg = config.local.boot.secureBoot;
-in
-{
- options.local.boot.secureBoot = {
- enable = mkEnableOption "secure boot";
- };
-
- config = mkIf cfg.enable {
- assertions = [
- {
- assertion = config.local.boot.efi.enable;
- message = "secure boot requires EFI";
- }
- {
- assertion = config.local.boot.loader == "systemd-boot";
- message = "lanzaboote requires systemd-boot";
- }
- ];
-
- boot = {
- loader.systemd-boot.enable = mkForce false;
-
- lanzaboote = {
- enable = true;
- pkiBundle = "/etc/secureboot";
- };
- };
-
- environment.systemPackages = [
- pkgs.sbctl
- ];
-
- local.boot.impermanence.directories = [ "/etc/secureboot" ];
- };
-}