From 94ffaabeb9602e689e55fdd21b9beb2d9c552901 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Thu, 2 Apr 2026 19:07:17 -0600
Subject: sys/platform: [lustrated]: switch to luks-ext4-fscrypt-impermanence
 boot stack

---
 sys/boot/impermanence.nix | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

(limited to 'sys/boot/impermanence.nix')

diff --git a/sys/boot/impermanence.nix b/sys/boot/impermanence.nix
index 09aee09..5c7e46b 100644
--- a/sys/boot/impermanence.nix
+++ b/sys/boot/impermanence.nix
@@ -33,10 +33,18 @@ in {
           "/var/log"
         ];
 
-        files = [
-          "/etc/machine-id"
-          "/var/lib/logrotate.status"
-        ];
+        files =
+          [
+            "/etc/machine-id"
+            "/var/lib/logrotate.status"
+          ]
+          ++ optionals config.users.mutableUsers [
+            "/etc/group"
+            "/etc/passwd"
+            "/etc/shadow"
+            "/etc/subuid"
+            "/etc/subgid"
+          ];
       };
     }
     (mkIf cfg.enable {
-- 
cgit v1.2.3