From e40b295b82b1c24c789d569dd94e604554e99372 Mon Sep 17 00:00:00 2001
From: toinux <26522723+itzwam@users.noreply.github.com>
Date: Thu, 2 Jan 2025 05:21:01 +0100
Subject: [PATCH] Fix activationScript enrollKeys option

---
 nix/modules/lanzaboote.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nix/modules/lanzaboote.nix b/nix/modules/lanzaboote.nix
index d6224754..ff2be074 100644
--- a/nix/modules/lanzaboote.nix
+++ b/nix/modules/lanzaboote.nix
@@ -124,8 +124,8 @@ in
       enable = true;
       installHook = pkgs.writeShellScript "bootinstall" ''
         ${optionalString cfg.enrollKeys ''
-          mkdir -p /tmp/pki
-          cp -r ${cfg.pkiBundle}/* /tmp/pki
+          ${lib.getExe' pkgs.coreutils "mkdir"} -p /tmp/pki
+          ${lib.getExe' pkgs.coreutils "cp"} -r ${cfg.pkiBundle}/* /tmp/pki
           ${lib.getExe sbctlWithPki} enroll-keys --yes-this-might-brick-my-machine
         ''}