Image building take 2

We want verity protected partitions as well as encrypted state/data along with verified boot.
This PR integrates Peter Marshall's awesome little Nixlet project as a starting point, especially the nice testing scaffolding will be super helpful! 

https://github.com/petm5/nixlet/
This commit is contained in:
Daniel Lundin 2024-11-11 23:02:38 +01:00
parent da5bdb3d47
commit c59ea29957
Signed by: dln
SSH key fingerprint: SHA256:dQy1Xj3UiqJYpKR5ggQ2bxgz4jCH8IF+k3AB8o0kmdI
39 changed files with 1311 additions and 3272 deletions

View file

@ -13,11 +13,7 @@ build: build-image
# Build PatOS image
build-image:
nix build .#patos_image
# Build PatOS update image
build-update:
nix build .#patos_update
nix build .#patos
run: build-image
qemu-efi -snapshot ./result/disk.qcow2
qemu-uefi-tpm ./result/*.img