In reply to @lassulus:lassul.us
Lanzaboote needs interaction with the efi/bios to deploy your keys there. But I guess everything else could be done by the image builder

error:
       … in the condition of the assert statement
         at /nix/store/l3amk5lsakpc93him5kry24kax23sn4h-source/lib/customisation.nix:365:17:
          364|     in commonAttrs // {
          365|       drvPath = assert condition; drv.drvPath;
             |                 ^
          366|       outPath = assert condition; drv.outPath;

       … while calling the 'seq' builtin
         at /nix/store/l3amk5lsakpc93him5kry24kax23sn4h-source/lib/customisation.nix:80:32:
           79|       newDrv = derivation (drv.drvAttrs // (f drv));
           80|     in flip (extendDerivation (seq drv.drvPath true)) newDrv (
             |                                ^
           81|       { meta = drv.meta or {};

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: attribute 'diskoScript' missing
       at /nix/store/w4k2mviwfgnqf7bpq3j725b4wghgc2yx-source/lib/make-disk-image.nix:81:7:
           80|     ''}
           81|     ${systemToInstall.config.system.build.diskoScript}
             |       ^
           82|   '';