feat: initial secure boot

This commit is contained in:
Lars Sjöström 2025-01-23 12:11:57 +01:00
parent f01ed61b00
commit 1a76ee21ce
No known key found for this signature in database
8 changed files with 189 additions and 1 deletions
modules/image

View file

@ -76,6 +76,7 @@ let
contents = {
"/EFI/BOOT/BOOT${lib.toUpper efiArch}.EFI".source = "${pkgs.systemdUkify}/lib/systemd/boot/efi/systemd-boot${efiArch}.efi";
"/EFI/Linux/${config.system.boot.loader.ukiFile}".source = "${config.system.build.uki}/${config.system.boot.loader.ukiFile}";
"/EFI/loader/keys/patos".source = ../../keys;
"/EFI/memtest86/memtest86.efi".source = "${pkgs.memtest86plus}/memtest.efi";
"/loader/entries/patos-factory-reset.conf".source = pkgs.writeText "patos-factory-reset.conf" ''
title Patos Factory Reset