From 11bc7eb4378a8672861a5deec97826ba3294af59 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Fri, 3 Apr 2026 19:31:34 -0600
Subject: sys/boot: impermanence: add support for an independent 'trust'
 persistent storage

---
 sys/boot/stack/luks-ext4-fscrypt-impermanence.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'sys/boot/stack')

diff --git a/sys/boot/stack/luks-ext4-fscrypt-impermanence.nix b/sys/boot/stack/luks-ext4-fscrypt-impermanence.nix
index a057aa0..5b19242 100644
--- a/sys/boot/stack/luks-ext4-fscrypt-impermanence.nix
+++ b/sys/boot/stack/luks-ext4-fscrypt-impermanence.nix
@@ -104,7 +104,10 @@ in {
 
     local.boot = {
       fscrypt.enable = true;
-      impermanence.enable = true;
+      impermanence = {
+        enable = true;
+        trust.path = "/toplevel/trust";
+      };
     };
   };
 }
-- 
cgit v1.2.3