feat: cleanup, secure boot for framework

This commit is contained in:
Kat Inskip 2024-03-17 10:38:09 -07:00
parent 15f40761fb
commit d37bd2c669
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
18 changed files with 297 additions and 144 deletions

View file

@ -17,6 +17,16 @@
nixpkgs = {
url = "github:nixos/nixpkgs/nixos-unstable";
};
lanzaboote = {
url = "github:nix-community/lanzaboote/v0.3.0";
# Optional but recommended to limit the size of your system closure.
inputs = {
nixpkgs.follows = "nixpkgs";
flake-utils.follows = "utils";
flake-compat.follows = "flake-compat";
};
};
flakelibstd = {
url = "github:flakelib/std";
inputs.nix-std.follows = "std";
@ -88,7 +98,10 @@
# secrets
sops-nix = {
url = "github:Mic92/sops-nix";
inputs.nixpkgs.follows = "nixpkgs";
inputs = {
nixpkgs.follows = "nixpkgs";
nixpkgs-stable.follows = "nixpkgs";
};
};
# secrets templating
scalpel = {