From 33402a3a3aa4655a86acf208ec87d34a343ea0c1 Mon Sep 17 00:00:00 2001
From: Preston Pan <ret2pop@gmail.com>
Date: Sun, 21 Sep 2025 20:54:48 -0700
Subject: remove secureboot for now

---
 config/nix.org | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'config/nix.org')

diff --git a/config/nix.org b/config/nix.org
index a214516..f8765ae 100644
--- a/config/nix.org
+++ b/config/nix.org
@@ -1374,7 +1374,7 @@ because they enhance security.
 
       lanzaboote = {
     	  enable = config.monorepo.profiles.secureBoot.enable;
-    	  pkiBundle = "/etc/secureboot";
+    	  pkiBundle = "/var/lib/sbctl";
       };
 
       loader = {
@@ -3776,7 +3776,6 @@ This is pretty understandable, if you understand all the above.
       monorepo = {
         profiles = {
           impermanence.enable = true;
-          secureBoot.enable = true;
         };
         vars = {
           device = "/dev/sda";
-- 
cgit v1.3