From 04875a3bd4e4cca8f7e469febfbcb5feb97d51a4 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Fri, 23 May 2025 23:05:45 +0200
Subject: [PATCH] profile/usb-iso: allow insecure ventoy

---
 profiles/usb-iso/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/profiles/usb-iso/default.nix b/profiles/usb-iso/default.nix
index 7c0adae..bc66209 100644
--- a/profiles/usb-iso/default.nix
+++ b/profiles/usb-iso/default.nix
@@ -13,6 +13,10 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    # binary blobs are needed for ventoy
+    nixpkgs.config.permittedInsecurePackages = [
+      "ventoy-1.1.05"
+    ];
     environment.systemPackages = with pkgs; [
       ventoy-bin-full # general
       woeusb-ng # windows