diff options
| -rw-r--r-- | config/nix.org | 3 | ||||
| -rw-r--r-- | nix/modules/configuration.nix | 2 | ||||
| -rw-r--r-- | nix/systems/continuity/default.nix | 1 |
3 files changed, 2 insertions, 4 deletions
diff --git a/config/nix.org b/config/nix.org index a214516..f8765ae 100644 --- a/config/nix.org +++ b/config/nix.org @@ -1374,7 +1374,7 @@ because they enhance security. lanzaboote = { enable = config.monorepo.profiles.secureBoot.enable; - pkiBundle = "/etc/secureboot"; + pkiBundle = "/var/lib/sbctl"; }; loader = { @@ -3776,7 +3776,6 @@ This is pretty understandable, if you understand all the above. monorepo = { profiles = { impermanence.enable = true; - secureBoot.enable = true; }; vars = { device = "/dev/sda"; diff --git a/nix/modules/configuration.nix b/nix/modules/configuration.nix index 9ecf291..e87f406 100644 --- a/nix/modules/configuration.nix +++ b/nix/modules/configuration.nix @@ -83,7 +83,7 @@ lanzaboote = { enable = config.monorepo.profiles.secureBoot.enable; - pkiBundle = "/etc/secureboot"; + pkiBundle = "/var/lib/sbctl"; }; loader = { diff --git a/nix/systems/continuity/default.nix b/nix/systems/continuity/default.nix index 452ae30..c156055 100644 --- a/nix/systems/continuity/default.nix +++ b/nix/systems/continuity/default.nix @@ -8,7 +8,6 @@ monorepo = { profiles = { impermanence.enable = true; - secureBoot.enable = true; }; vars = { device = "/dev/sda"; |