secureboot keys

nix/etcnixos/flake.lock

@@ -332,11 +332,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1726759964,
-        "narHash": "sha256-d7ej4YWIxJs81uxlQSeiAUTqRLHJFhEtmbqIltKN1SI=",
+        "lastModified": 1726766095,
+        "narHash": "sha256-QapPXaSkDmiaJ3WcCIvF8vnyzCfuxd0xgUO+H7ShJ5E=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6886cfd66b1a58135d1e262d76834f77b2235f35",
+        "rev": "223f611353f687cc301b0285f4fabe015d100754",
         "type": "github"
       },
       "original": {

nix/etcnixos/system-mreow.nix

@@ -109,4 +109,19 @@
   #weird hack to get swaylock working? idk, if you don't put this here, password entry doesnt work
   #if I move to another lock screen program, i will have to replace `swaylock`
   security.pam.services.swaylock = { };
+
+  system.activationScripts = {
+
+    "secureboot-keys".text =
+      let
+        secureboot_path = "/etc/secureboot";
+      in
+      ''
+        #!/bin/sh
+        rm -fr ${secureboot_path}
+        mkdir -p ${secureboot_path}
+        ${pkgs.gnutar}/bin/tar xf /etc/nixos/secrets/secureboot.tar -C ${secureboot_path}
+      '';
+
+  };
 }