update

etcnixos/flake.lock

@@ -34,11 +34,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1742895049,
-        "narHash": "sha256-yW6jHx1SxPwCyvjV1oXdXBN15I19TQMfmvhWYa3+igQ=",
+        "lastModified": 1742921081,
+        "narHash": "sha256-c1mq2EwulIoLng2oww3IozEGTarxuCBRJ5w5KIS0Mf4=",
         "owner": "chaotic-cx",
         "repo": "nyx",
-        "rev": "d64bc1983d0be93e9d6db032698c7519ab99af56",
+        "rev": "ef953b78549dc877d958d002a8661cbb65e87a1f",
         "type": "github"
       },
       "original": {
@@ -230,11 +230,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1742701794,
-        "narHash": "sha256-bJIFFa6/4vBGoNmCwjO5TCIbiveV2BRxVLqHcxk5jXw=",
+        "lastModified": 1742871411,
+        "narHash": "sha256-F3xBdOs5m0SE6Gq3jz+JxDOPvsLs22vbGfD05uF6xEc=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "9172a6f956f7e0f7810861b9b1146f1c43d9abcb",
+        "rev": "869f2ec2add75ce2a70a6dbbf585b8399abec625",
         "type": "github"
       },
       "original": {

etcnixos/system-mreow.nix

@@ -6,10 +6,6 @@
   inputs,
   ...
 }:
-
-let
-  untar = pkgs.callPackage ./util/untar.nix;
-in
 {
   imports = [
     ./common.nix
@@ -88,7 +84,7 @@ in
       mkdir -p ${config.boot.lanzaboote.pkiBundle}
       ${pkgs.gnutar}/bin/tar xf ${./secrets/secureboot.tar} -C ${config.boot.lanzaboote.pkiBundle}
       chown -R root:wheel ${config.boot.lanzaboote.pkiBundle}
-      chmod -R 700 ${config.boot.lanzaboote.pkiBundle}
+      chmod -R 500 ${config.boot.lanzaboote.pkiBundle}
     '';
   };
 

etcnixos/util/untar.nix

@@ -1,21 +0,0 @@
-{
-  stdenv,
-  gnutar,
-  src,
-}:
-stdenv.mkDerivation {
-  pname = "untar";
-  version = "1.0";
-
-  inherit src;
-
-  buildInputs = [ gnutar ];
-
-  # input is a file, not a directory, skip unpackPhase
-  unpackPhase = "true";
-
-  installPhase = ''
-    mkdir -p $out
-    tar xf ${src} -C $out/
-  '';
-}