UEFI Secure Boot support for NixOS

Funding window: 2021-12 – 2024-08

Add a self-sovereign root of trust as part of supply chain security

NLnet export

• Programme: ngi-assure
• Export status: early (NLnet field; currently often left at early)
• Keywords: Bootloader, DigitalSignature, TPM
• Categories: engineering, firmware

Resources

Talk

Matrix

https://matrix.to/#/#nixos-secure-boot:ukvly.org

Resources

Source code

https://github.com/nix-community/lanzaboote