From e57e3100d857ba9e4ef383bdbb5757e8c2f7e40f Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Mon, 1 Jun 2026 00:32:47 +0200
Subject: modules/boot: Sign added tails linux kernel

---
 modules/by-name/bo/boot/module.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'modules/by-name/bo/boot/module.nix')

diff --git a/modules/by-name/bo/boot/module.nix b/modules/by-name/bo/boot/module.nix
index af9dcfc2..310355d2 100644
--- a/modules/by-name/bo/boot/module.nix
+++ b/modules/by-name/bo/boot/module.nix
@@ -113,6 +113,8 @@ in {
                   systemdCfg.extraFiles
                 )}
 
+                ${lib.getExe pkgs.sbctl} sign "${bootMountPoint}/${tailsPrefix}/vmlinuz-linux"
+
                 ${concatStrings (
                   mapAttrsToList (n: v: ''
                     ${install} -Dp "${pkgs.writeText n v}" "${bootMountPoint}/loader/entries/"${escapeShellArg n}
-- 
cgit v1.3.1