Skip to content

CHANGELOG.md

Latest commit

 

History

History
56 lines (43 loc) · 2 KB

CHANGELOG.md

File metadata and controls

56 lines (43 loc) · 2 KB

Changelog

1.0.0

Added

  • You can now use Lanzaboote completely without flakes or flake-compat, explicitly controlling all dependencies:

    system = builtins.currentSystem;
pkgs = import sources.nixpkgs { inherit system; };

lanzaboote = import sources.lanzaboote {
  inherit system pkgs;
  rust-overlay = sources.rust-overlay;
  crane = import sources.crane { inherit pkgs; };
};

    However, this is optional. You can also just provide an empty attrset { } and rely on the versions of the dependencies we have pinned.

  • Added the option boot.lanzaboote.autoGenerateKeys.enable which allows you to automatically generate Secure Boot keys in a systemd service if they do not exist yet. Please read the docs for more info.

  • Added the options boot.lanzaboote.autoEnrollKeys.* which allow you to automatically enroll your Secure Boot keys into the firmware. A systemd service prepares everything and systemd-boot finally enrolls the keys on the next boot. Please read the docs for more info.

  • Added the option boot.lanzaboote.allowUnsigned which enables installing unsigned artifacts to the ESP. This is useful for automatic provisioning of systems with Secure Boot.

  • Added support for multiple ESPs. You can configure additional ESPs that you want Lanzaboote to install boot artifacts to via boot.lanzaboote.extraEfiSysMountPoints = [ "/boot2" ];:

Changed

  • Changed the non-flakes Nix interface of Lanzaboote. Now needs to be called with an argument: lanzaboote = import sources.lanzaboote { };.
  • boot.lanzaboote.pkiBundle now uses the type externalPath and thus cannot point to Nix Store paths anymore.

Removed

  • Removed the internal option boot.lanzaboote.enrollKeys that was only intended for testing without replacement.

0.4.3

Added

  • Added boot.lanzaboote.sortKey option. This can be used to add a custom sort-key to your boot entries.