1

docs: add note for secureboot key enrolment

This commit is contained in:
Himadri Bhattacharjee
2024-02-12 08:41:45 +05:30
parent 1f712cd963
commit e5eac71c57

View File

@@ -16,13 +16,14 @@ sudo nixos-rebuild switch --flake .#cafe
To enable secureboot, use the preinstalled `sbctl` command to generate your keys,
clear the manufacturer keys and enroll yours as described [here](https://github.com/nix-community/lanzaboote/blob/master/docs/QUICK_START.md).
Once the keys are enrolled, the following command must be run rebuild our system
from now on
Once the keys are enrolled, run the following to rebuild the system from now on
```sh
sudo nixos-rebuild switch --flake .#cafe-secureboot
```
> Note: My system did not require enrolling keys alongside the Microsoft keys. However, your setup might break if you do not include the Microsoft keys. Classic case of Microsoft being a jerk.
### Sponsorblock for mpv
Optionally, if you want to block sponsors in mpv, run