secureboot keys

nix/etcnixos/system-mreow.nix

@@ -109,4 +109,19 @@
   #weird hack to get swaylock working? idk, if you don't put this here, password entry doesnt work
   #if I move to another lock screen program, i will have to replace `swaylock`
   security.pam.services.swaylock = { };
+
+  system.activationScripts = {
+
+    "secureboot-keys".text =
+      let
+        secureboot_path = "/etc/secureboot";
+      in
+      ''
+        #!/bin/sh
+        rm -fr ${secureboot_path}
+        mkdir -p ${secureboot_path}
+        ${pkgs.gnutar}/bin/tar xf /etc/nixos/secrets/secureboot.tar -C ${secureboot_path}
+      '';
+
+  };
 }