this repo has no description
1{
2 lib,
3 config,
4 ...
5}: {
6 options.cow.lanzaboote.enable = lib.mkEnableOption "Use lanzaboote for booting and secure boot";
7
8 config.boot = lib.mkIf config.cow.lanzaboote.enable {
9 loader.systemd-boot.enable = lib.mkForce false;
10 bootspec.enable = true;
11
12 lanzaboote = {
13 enable = true;
14 pkiBundle = lib.mkDefault "/var/lib/sbctl";
15 };
16 };
17}