new cnix system and lanzaboote default

2024-12-31 17:39:34 +01:00
parent 484b0747ea
commit 1ba9ce1ce6
3 changed files with 40 additions and 46 deletions
--- a/modules/nixos/boot/loader/default.nix
+++ b/modules/nixos/boot/loader/default.nix
@@ -47,7 +47,7 @@ in {
      boot = {
        lanzaboote = {
          enable = true;
-          pkiBundle = "/etc/secureboot";
+          pkiBundle = "/var/lib/sbctl";
        };

        # We let Lanzaboote install systemd-boot