Feat(hosts/thinklappi): Enable secureboot with lanzaboote

1 files changed, 8 insertions, 3 deletions

diff --git a/flake.nix b/flake.nix
index 4685562..97560f3 100644
--- a/flake.nix
+++ b/flake.nix
@@ -10,6 +10,10 @@
     };
 
     # inputs for following
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote/v0.3.0";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     systems = {
       url = "github:nix-systems/x86_64-linux"; # only evaluate for this system
     };
@@ -97,18 +101,19 @@
     yambar_memory,
     #grades,
     prismlauncher,
+    lanzaboote,
     ...
   } @ attrs: let
     system = "x86_64-linux";
     pkgs = nixpkgs.legacyPackages."${system}";
-    
+
     sysLib = shell_library.lib.${system};
   in {
     nixosConfigurations.thinklappi = nixpkgs.lib.nixosSystem {
       inherit system;
       specialArgs = attrs;
-#nixpkgs.overlays = [ polymc.overlay ];
       modules = [
+        lanzaboote.nixosModules.lanzaboote
         ./hosts/thinklappi
         home-manager.nixosModules.home-manager
         {
@@ -117,7 +122,7 @@
             useUserPackages = true;
             users.sils = import ./users/sils;
             extraSpecialArgs = {inherit pkgs system sysLib river_init_lesser yambar_cpu yambar_memory prismlauncher;};
-        };
+          };
         }
       ];
     };