From e5eac71c5796b4a4e7536d146cef23ed1c8ca20f Mon Sep 17 00:00:00 2001 From: Himadri Bhattacharjee <107522312+lavafroth@users.noreply.github.com> Date: Mon, 12 Feb 2024 08:41:45 +0530 Subject: [PATCH] docs: add note for secureboot key enrolment --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index ac73308..74b69c5 100644 --- a/README.md +++ b/README.md @@ -16,13 +16,14 @@ sudo nixos-rebuild switch --flake .#cafe To enable secureboot, use the preinstalled `sbctl` command to generate your keys, clear the manufacturer keys and enroll yours as described [here](https://github.com/nix-community/lanzaboote/blob/master/docs/QUICK_START.md). -Once the keys are enrolled, the following command must be run rebuild our system -from now on +Once the keys are enrolled, run the following to rebuild the system from now on ```sh sudo nixos-rebuild switch --flake .#cafe-secureboot ``` +> Note: My system did not require enrolling keys alongside the Microsoft keys. However, your setup might break if you do not include the Microsoft keys. Classic case of Microsoft being a jerk. + ### Sponsorblock for mpv Optionally, if you want to block sponsors in mpv, run