remove secureboot for now

diff --git a/config/nix.org b/config/nix.org
index a2145164937ddb0cf544ecead96e139e8a003303..f8765aed5c79b2eaec60501df77997766cd667f2 100644 (file)
--- a/config/nix.org
+++ b/config/nix.org
@@ -1374,7 +1374,7 @@ because they enhance security.
 
       lanzaboote = {
          enable = config.monorepo.profiles.secureBoot.enable;
-         pkiBundle = "/etc/secureboot";
+         pkiBundle = "/var/lib/sbctl";
       };
 
       loader = {
@@ -3776,7 +3776,6 @@ This is pretty understandable, if you understand all the above.
       monorepo = {
         profiles = {
           impermanence.enable = true;
-          secureBoot.enable = true;
         };
         vars = {
           device = "/dev/sda";

diff --git a/nix/modules/configuration.nix b/nix/modules/configuration.nix
index 9ecf29191d5b25b3020c292077afa9021bfb74fb..e87f406c6e768da6e2da0e53390f9bd4ffce7096 100644 (file)
--- a/nix/modules/configuration.nix
+++ b/nix/modules/configuration.nix
@@ -83,7 +83,7 @@
 
     lanzaboote = {
          enable = config.monorepo.profiles.secureBoot.enable;
-         pkiBundle = "/etc/secureboot";
+         pkiBundle = "/var/lib/sbctl";
     };
 
     loader = {

diff --git a/nix/systems/continuity/default.nix b/nix/systems/continuity/default.nix
index 452ae30aa77908f06f5c115c6c5dc6408ae66a65..c15605504d2329fa3cc563b52e56eca62d5a8d01 100644 (file)
--- a/nix/systems/continuity/default.nix
+++ b/nix/systems/continuity/default.nix
@@ -8,7 +8,6 @@
     monorepo = {
       profiles = {
         impermanence.enable = true;
-        secureBoot.enable = true;
       };
       vars = {
         device = "/dev/sda";