Update boot options

options/system/boot/default.nix

@@ -0,0 +1,26 @@
+{ config, lib, pkgs, ...}: let
+  inherit (lib) mkOption mkEnableOption literalExpression;
+
+  cfg = config.myOptions.system.boot;
+in {
+  imports = [
+    ./secure-boot.nix
+  ];
+
+  options.myOptions.system.boot = {
+    kernel = mkOption {
+      type = with lib.types; nullOr raw;
+      default = pkgs.linuxPackages_latest;
+      example = literalExpression "pkgs.linuxPackages_latest";
+      description = "The kernel to use for the system.";
+    };
+
+    tmpOnTmpfs =
+      mkEnableOption ''
+        `/tmp` living on tmpfs. false means it will be cleared manually on each reboot
+
+        This option defaults to `true` if the host provides patches to the kernel package in
+        `boot.kernelPatches`
+      '';
+  };
+}

options/system/boot/secure-boot.nix

@@ -2,8 +2,8 @@
   inherit (lib) mkEnableOption;
 in
 {
-  options.myOptions.system.secure-boot = {
-     enabled = mkEnableOption ''
+  options.myOptions.system.boot.secure-boot = {
+     enable = mkEnableOption ''
       secure-boot using lanzaboote.
 
       Note that you will need to have UEFI firmware, and the rebuild

options/system/default.nix

@@ -3,8 +3,8 @@
 in
 {
   imports = [
+    ./boot
     ./impermanence.nix
-    ./secure-boot.nix
   ];
 
   options.myOptions.system = {