feat: initial secure boot

2025-01-23 12:11:57 +01:00 · 2025-01-23 12:11:57 +01:00 · 1a76ee21ce
commit 1a76ee21ce
parent f01ed61b00
8 changed files with 189 additions and 1 deletions
--- a/.woodpecker/ci.yaml
+++ b/.woodpecker/ci.yaml
@ -6,6 +6,17 @@ when:

 steps:
  check:
-    image: docker.io/nixpkgs/nix-flakes:nixos-24.05
+    image: docker.io/nixpkgs/nix-flakes:nixos-25.05
    commands:
      - nix flake check
+
+  sign:
+    image: docker.io/nixpkgs/nix-flakes:nixos-25.05
+    environment:
+        DB_KEY:
+          from_secret: secure_boot_key
+        DB_CRT:
+          from_secret: secure_boot_crt
+    commands:
+      - ./scripts/sign-release.sh
+