# Pastebin Bepk83pQ
  with pkgs;
  let
    publicCert = "${cacert}/etc/ssl/certs/ca-bundle.crt";
  in
    ipxe.overrideAttrs (attrs: rec {
      makeFlags = attrs.makeFlags ++ [
        "EMBED=${./menu.ipxe}"
        "CERT=${publicCert}"
        "TRUST=${publicCert}"
      ];
      enabledOptions = attrs.enabledOptions ++ [ "CERT_CMD" ];
    })