flake.nix: lanzaboote 0.4.2

khaneliman · Jan 25, 2025 · 9ef93f7 · 9ef93f7
1 parent b239b06
commit 9ef93f7
Show file tree

Hide file tree

Showing 4 changed files with 55 additions and 99 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -22,7 +22,7 @@
     # home-manager.url = "git+file:///Users/khaneliman/Documents/github/home-manager";
 
     # Secure boot
-    lanzaboote.url = "github:nix-community/lanzaboote/v0.4.1";
+    lanzaboote.url = "github:nix-community/lanzaboote/v0.4.2";
 
     # nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
     nixpkgs.url = "github:nixos/nixpkgs";

diff --git a/modules/nixos/system/boot/default.nix b/modules/nixos/system/boot/default.nix
@@ -57,7 +57,7 @@ in
 
       lanzaboote = mkIf cfg.secureBoot {
         enable = true;
-        pkiBundle = "/etc/secureboot";
+        pkiBundle = "/var/lib/sbctl";
       };
 
       loader = {

diff --git a/templates/snowfall/modules/nixos/system/boot/default.nix b/templates/snowfall/modules/nixos/system/boot/default.nix
@@ -58,7 +58,7 @@ in
 
       lanzaboote = mkIf cfg.secureBoot {
         enable = true;
-        pkiBundle = "/etc/secureboot";
+        pkiBundle = "/var/lib/sbctl";
       };
 
       loader = {