Add lanzaboote

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/installer/README.md

@@ -1,12 +1,16 @@
 # installer
 
-I have automated myself out of a job. How to use:
+I have automated myself out of a job. Here's how to use the installer to create a new host:
 
-1. Boot into installer
+1. Enable Secure Boot Setup Mode on the target device's UEFI menu - this will vary depending on the manufacturer
 
-2. Connect to the internet with `sudo nmcli device wifi connect "<SSID>" [--ask]`
+2. Boot into the installer
 
-3. Run `sudo nix-install /etc/nixos -m install|repair -h host [-k key] [-c] [-r]"`
+3. Connect to the internet with `sudo nmcli device wifi connect "<SSID>" [--ask]`
+
+4. Run `sudo nix-install /etc/nixos -m install|repair -s -h host [-k key] [-c] [-r]"`
+
+5. Enable Secure Boot on the device's UEFI menu.
 
 ## Reinstalling the Installer
 
@@ -65,4 +69,4 @@ I have automated myself out of a job. How to use:
 
 6. I really hope you had a backup of the keys, because you must copy them to the repository before the next step.
 
-7. Run `nix --experimental-features "nix-command flakes" shell nixpkgs#disko nixpkgs#jq -c bash hosts/common/configs/system/nix-install/install.sh nix -m install -h installer -k personal -c`
+7. Run `nix --experimental-features "nix-command flakes" shell nixpkgs#disko nixpkgs#sbctl nixpkgs#jq -c bash hosts/common/configs/system/nix-install/install.sh . -m install -h installer -k personal -c`

hosts/installer/configs/ssh/default.nix

@@ -0,0 +1,14 @@
+{ inputs, ... }:
+{
+  sops.secrets."ssh/key" = {
+    sopsFile = "${inputs.secrets}/personal/secrets.yaml";
+    path = "/root/.ssh/ssh_personal_ed25519_key";
+  };
+
+  programs.ssh.extraConfig = ''
+    Host karaolidis.com
+      User git
+      HostName karaolidis.com
+      IdentityFile /root/.ssh/ssh_personal_ed25519_key
+  '';
+}

hosts/installer/default.nix

@@ -15,6 +15,7 @@
     ../common/configs/system/git
     ../common/configs/system/gpg-agent
     ../common/configs/system/impermanence
+    ../common/configs/system/lanzaboote
     ../common/configs/system/neovim
     ../common/configs/system/networkmanager
     ../common/configs/system/nix
@@ -35,6 +36,8 @@
     ../common/configs/system/users
     ../common/configs/system/zsh
 
+    ./configs/ssh
+
     ./users/nick
   ];