summaryrefslogtreecommitdiff
path: root/sys/boot/sb.nix
diff options
context:
space:
mode:
Diffstat (limited to 'sys/boot/sb.nix')
-rw-r--r--sys/boot/sb.nix37
1 files changed, 0 insertions, 37 deletions
diff --git a/sys/boot/sb.nix b/sys/boot/sb.nix
deleted file mode 100644
index bdf7f0f..0000000
--- a/sys/boot/sb.nix
+++ /dev/null
@@ -1,37 +0,0 @@
-{ config, lib, pkgs, ... }:
-with lib; let
- cfg = config.local.boot.secureBoot;
-in
-{
- options.local.boot.secureBoot = {
- enable = mkEnableOption "secure boot";
- };
-
- config = mkIf cfg.enable {
- assertions = [
- {
- assertion = config.local.boot.efi.enable;
- message = "secure boot requires EFI";
- }
- {
- assertion = config.local.boot.loader == "systemd-boot";
- message = "lanzaboote requires systemd-boot";
- }
- ];
-
- boot = {
- loader.systemd-boot.enable = mkForce false;
-
- lanzaboote = {
- enable = true;
- pkiBundle = "/etc/secureboot";
- };
- };
-
- environment.systemPackages = [
- pkgs.sbctl
- ];
-
- local.boot.impermanence.directories = [ "/etc/secureboot" ];
- };
-}