Bump lanzaboote from v0.4.3 to v1.0.0

[dependabot]

Bumps lanzaboote from v0.4.3 to v1.0.0.

Release notes

Sourced from lanzaboote's releases.

v1.0.0

See the Changelog for more details.

New Contributors

• @​arianvp made their first contribution in nix-community/lanzaboote#493
• @​andre4ik3 made their first contribution in nix-community/lanzaboote#482
• @​Doridian made their first contribution in nix-community/lanzaboote#501
• @​master-hax made their first contribution in nix-community/lanzaboote#512
• @​qm3ster made their first contribution in nix-community/lanzaboote#473

Diff to the the last version: nix-community/lanzaboote@v0.4.3...v1.0.0

Changelog

Sourced from lanzaboote's changelog.

1.0.0

Added

• You can now use Lanzaboote completely without flakes or flake-compat, explicitly controlling all dependencies:

  system = builtins.currentSystem;
  pkgs = import sources.nixpkgs { inherit system; };
  lanzaboote = import sources.lanzaboote {
  inherit system pkgs;
  rust-overlay = sources.rust-overlay;
  crane = import sources.crane { inherit pkgs; };
  };

  However, this is optional. You can also just provide an empty attrset { } and rely on the versions of the dependencies we have pinned.

• Added the option boot.lanzaboote.autoGenerateKeys.enable which allows you to automatically generate Secure Boot keys in a systemd service if they do not exist yet. Please read the docs for more info.

• Added the options boot.lanzaboote.autoEnrollKeys.* which allow you to automatically enroll your Secure Boot keys into the firmware. A systemd service prepares everything and systemd-boot finally enrolls the keys on the next boot. Please read the docs for more info.

• Added the option boot.lanzaboote.allowUnsigned which enables installing unsigned artifacts to the ESP. This is useful for automatic provisioning of systems with Secure Boot.

• Added support for multiple ESPs. You can configure additional ESPs that you want Lanzaboote to install boot artifacts to via boot.lanzaboote.extraEfiSysMountPoints = [ "/boot2" ];:

Changed

• Changed the non-flakes Nix interface of Lanzaboote. Now needs to be called with an argument: lanzaboote = import sources.lanzaboote { };.
• boot.lanzaboote.pkiBundle now uses the type externalPath and thus cannot point to Nix Store paths anymore.

Removed

• Removed the internal option boot.lanzaboote.enrollKeys that was only intended for testing without replacement.

Commits

• e8c096a Merge pull request #514 from nikstur/prepare-0.5.0
• 2113ff6 treewide: release 1.0.0
• a2b9fef changelog: add entry about extraEfiSysMountPoints
• d125c8b Merge pull request #516 from nix-community/renovate/lock-file-maintenance
• a107ab1 chore(deps): lock file maintenance
• 4f5fc14 Merge pull request #509 from nikstur/auto-generate-enroll
• ac12fb1 docs: init auto-{generate,enroll}-keys and auto provisioning
• a739876 module: add autoGenerateKeys and autoEnrollKeys option
• 8c91788 module: use externalPath for pkiBundle
• 8af9ea4 shell.nix: fix local clippy and rustfmt
• Additional commits viewable in compare view