From 8e118c5a3f3343dd7a2106973c370b124a2c2422 Mon Sep 17 00:00:00 2001
From: Christoph Urlacher <christoph.urlacher@protonmail.com>
Date: Mon, 31 Aug 2026 20:30:41 +0200
Subject: [PATCH] Modules/Impermanence: Persist /var/lib/auto-cryptenroll for
 lanzaboote

---
 system/systemmodules/impermanence/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/system/systemmodules/impermanence/default.nix b/system/systemmodules/impermanence/default.nix
index e0294b4..447383c 100644
--- a/system/systemmodules/impermanence/default.nix
+++ b/system/systemmodules/impermanence/default.nix
@@ -76,6 +76,7 @@ in {
 
           (mkRDir "/var/db/sudo" m711)
 
+          (mkRDir "/var/lib/auto-cryptenroll" m755) # Lanzaboote
           (mkRDir "/var/lib/bluetooth" m755) # m700
           (mkRDir "/var/lib/btrfs" m755)
           (mkRDir "/var/lib/containers" m755)
@@ -84,7 +85,7 @@ in {
           (mkRDir "/var/lib/libvirt" m755)
           (mkRDir "/var/lib/NetworkManager" m755)
           (mkRDir "/var/lib/nixos" m755)
-          (mkRDir "/var/lib/sbctl" m755)
+          (mkRDir "/var/lib/sbctl" m755) # Lanzaboote
           (mkRDir "/var/lib/systemd" m755)
 
           (mkRDir "/var/tmp" m777)