From 0bbe53d295c23378d0df9287c4e69eb762e18a32 Mon Sep 17 00:00:00 2001
From: Will Fancher <elvishjerricco@gmail.com>
Date: Wed, 23 Jul 2025 12:21:24 -0400
Subject: [PATCH] lanzaboote-tool: Remove

The lanzaboote-tool doesn't really see much attention in nixpkgs. See
the hydra build failures:
https://hydra.nixos.org/job/nixos/trunk-combined/nixpkgs.lanzaboote-tool.x86_64-linux
It doesn't make much sense in nixpkgs anyway. It's basically useless
without the stub and the nixos module, neither of which is
present. Users should migrate to the Nix expressions provided by [the
main lanzaboote repo](https://github.com/nix-community/lanzaboote).
---
 pkgs/by-name/la/lanzaboote-tool/package.nix | 68 ---------------------
 pkgs/top-level/aliases.nix                  |  1 +
 2 files changed, 1 insertion(+), 68 deletions(-)
 delete mode 100644 pkgs/by-name/la/lanzaboote-tool/package.nix

diff --git a/pkgs/by-name/la/lanzaboote-tool/package.nix b/pkgs/by-name/la/lanzaboote-tool/package.nix
deleted file mode 100644
index e6883bb8a15e..000000000000
--- a/pkgs/by-name/la/lanzaboote-tool/package.nix
+++ /dev/null
@@ -1,68 +0,0 @@
-{
-  systemd,
-  stdenv,
-  makeWrapper,
-  binutils-unwrapped,
-  sbsigntool,
-  rustPlatform,
-  fetchFromGitHub,
-  lib,
-}:
-rustPlatform.buildRustPackage rec {
-  pname = "lanzaboote-tool";
-  version = "0.3.0";
-
-  src = fetchFromGitHub {
-    owner = "nix-community";
-    repo = "lanzaboote";
-    rev = "v${version}";
-    hash = "sha256-Fb5TeRTdvUlo/5Yi2d+FC8a6KoRLk2h1VE0/peMhWPs=";
-  };
-
-  sourceRoot = "${src.name}/rust/tool";
-  useFetchCargoVendor = true;
-  cargoHash = "sha256-HnTsu46P3HRYo2d1DeaP6hqn+pVW3J4IM+CneckSFoM=";
-
-  env.TEST_SYSTEMD = systemd;
-  doCheck = lib.meta.availableOn stdenv.hostPlatform systemd;
-
-  nativeBuildInputs = [
-    makeWrapper
-  ];
-
-  postInstall = ''
-    # Clean PATH to only contain what we need to do objcopy.
-    # This is still an unwrapped lanzaboote tool lacking of the
-    # UEFI stub location.
-    mv $out/bin/lzbt $out/bin/lzbt-unwrapped
-    wrapProgram $out/bin/lzbt-unwrapped \
-      --set PATH ${
-        lib.makeBinPath [
-          binutils-unwrapped
-          sbsigntool
-        ]
-      }
-  '';
-
-  nativeCheckInputs = [
-    binutils-unwrapped
-    sbsigntool
-  ];
-
-  meta = with lib; {
-    description = "Lanzaboote UEFI tooling for SecureBoot enablement on NixOS systems (unwrapped; does not contain the required stub)";
-    homepage = "https://github.com/nix-community/lanzaboote";
-    license = licenses.gpl3Only;
-    mainProgram = "lzbt-unwrapped";
-    maintainers = with maintainers; [
-      raitobezarius
-      nikstur
-    ];
-    # Broken on aarch64-linux and any other architecture for now.
-    # Wait for 0.4.0.
-    platforms = [
-      "x86_64-linux"
-      "i686-linux"
-    ];
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index e9c8a8be2d86..a37a34c94233 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1014,6 +1014,7 @@ mapAliases {
   larynx = piper-tts; # Added 2023-05-09
   LASzip = laszip; # Added 2024-06-12
   LASzip2 = laszip_2; # Added 2024-06-12
+  lanzaboote-tool = throw "lanzaboote-tool has been removed due to lack of integration maintenance with nixpkgs. Consider using the Nix expressions provided by https://github.com/nix-community/lanzaboote"; # Added 2025-07-23
   latencytop = throw "'latencytop' has been removed due to lack of maintenance upstream."; # Added 2024-12-04
   latinmodern-math = lmmath;
   lazarus-qt = lazarus-qt5; # Added 2024-12-25