make lanzaboote optional

2025-12-07 20:47:34 -08:00
parent 923f3f0ffc
commit 4c7142dcda
2 changed files with 6 additions and 5 deletions
--- a/hosts/Yura-TPX13/default.nix
+++ b/hosts/Yura-TPX13/default.nix
@@ -11,6 +11,11 @@
    "sysrq_always_enabled=1"
  ];

+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
+
  networking.hostName = "Yura-TPX13"; # Define your hostname.
  networking.hostId = "8425e349"; # Required for ZFS.

--- a/hosts/common-desktop.nix
+++ b/hosts/common-desktop.nix
@@ -11,11 +11,7 @@
  boot.loader = {
    efi.canTouchEfiVariables = true;
    timeout = 3;
-    systemd-boot.enable = false;
-  };
-  boot.lanzaboote = {
-    enable = true;
-    pkiBundle = "/var/lib/sbctl";
+    systemd-boot.enable = !config.boot.lanzaboote.enable;
  };

  # https://nixos.wiki/wiki/Accelerated_Video_Playback