From e67d268f8b478199f3537cdb97eb428ede964a3c Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Sat, 11 May 2024 17:40:19 +0200
Subject: feat(sys/boot): Provide the latest arch-iso as boot target

---
 sys/boot/signing_key.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 sys/boot/signing_key.nix

(limited to 'sys/boot/signing_key.nix')

diff --git a/sys/boot/signing_key.nix b/sys/boot/signing_key.nix
new file mode 100644
index 00000000..788447be
--- /dev/null
+++ b/sys/boot/signing_key.nix
@@ -0,0 +1,18 @@
+{pkgs ? (builtins.getFlake "nixpkgs").legacyPackages."x86_64-linux"}:
+pkgs.stdenv.mkDerivation {
+  name = "archlinux_signing_keys";
+
+  outputHash = "sha256-evGWzkxMaZw3rlixKsyWCS/ZvNuZ+OfXQb6sgiHz9XY=";
+  outputHashAlgo = "sha256";
+  NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+
+  nativeBuildInputs = with pkgs; [
+    sequoia-sq
+  ];
+
+  dontUnpack = true;
+
+  buildPhase = ''
+    sq --verbose --no-cert-store --no-key-store network wkd fetch pierre@archlinux.org --output "$out"
+  '';
+}
-- 
cgit 1.4.1