Commit 2c2e79e71cbf

@@ -10,13 +10,13 @@
   ];
   boot = {
     # Secure boot configuration
-    bootspec.enable = true;
+    # bootspec.enable = true;
     # First boot systemd-boot has to be enabled, then switch to lanzaboote
-    loader.systemd-boot.enable = lib.mkForce false;
-    lanzaboote = {
-      enable = true;
-      pkiBundle = "/var/lib/sbctl";
-    };
+    # loader.systemd-boot.enable = lib.mkForce false;
+    # lanzaboote = {
+    # enable = true;
+    # pkiBundle = "/var/lib/sbctl";
+    # };
     initrd.availableKernelModules = [
       "nvme"
       "rtsx_pci_sdmmc"

@@ -1,4 +1,4 @@
-{ globals, ... }:
+{ globals, lib, ... }:
 {
   imports = [
     ../common/services/prometheus-exporters-node.nix
@@ -35,5 +35,5 @@
   security.pam.enableSSHAgentAuth = true;
 
   security.apparmor.enable = true;
-  # security.tpm2.enable = lib.mkForce false;
+  security.tpm2.enable = lib.mkForce false;
 }