Remove lanzaboote input and secure-boot module

This commit is contained in:
randogoth 2026-02-01 20:09:02 +02:00
parent 87cf790e83
commit f55cb439a3

View file

@ -1,20 +0,0 @@
{ lib, ... }:
{
# Use Lanzaboote to build signed Unified Kernel Images and shim-compatible boot chain.
boot.lanzaboote = {
enable = true;
pkiBundle = {
name = "nanuqsaurus";
description = "Secure Boot keys for nanuqsaurus installer ISO";
};
};
# Ensure systemd-boot is not pulled in by other modules.
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.loader.efi = {
canTouchEfiVariables = true;
efiSysMountPoint = "/boot";
};
}