Introduction
This documentation helps users set up UEFI Secure Boot for their NixOS system using a custom keychain. The audience are experienced NixOS users. Secure Boot for NixOS is still in development and has some sharp edges. There may be cases where you end up with a system that does not boot. Caution We only recommend setting up Secure Boot for NixOS users that are comfortable using recovery tools to restore their system or have a backup ready. At this point we have tested a few notebooks and are confident about Lenovo ThinkPads and Framework notebooks. However, Secure Boot support is known to be inconsistent even on notebooks from the same product line so we cannot give guarantees on the applicability of what we describe here. To be able to set up Secure Boot on your device, NixOS needs to be installed in UEFI mode and systemd-boot must be used as a boot loader. This means if you wish to install Lanzaboote on a new machine, you need to follow the installation instructions for systemd-boot an