Revert "disable secureboot"

This reverts commit c017cfb33d.
2025-06-04 21:08:01 -07:00
parent 8ad4e3bd42
commit 9d089208a7
1 changed files with 2 additions and 3 deletions
--- a/etcnixos/system-mreow.nix
+++ b/etcnixos/system-mreow.nix
@@ -56,7 +56,7 @@

  boot = {
    lanzaboote = {
-      enable = false;
+      enable = true;
      # TODO: proper secrets management so this is not stored in nix store
      pkiBundle = "/var/lib/sbctl";
    };
@@ -69,8 +69,7 @@
        generated at installation time. So we force it to false
        for now.
      */
-      # systemd-boot.enable = lib.mkForce false;
-      systemd-boot.enable = true;
+      systemd-boot.enable = lib.mkForce false;
    };
  };