enabled secure boot on the thinkpad

1 files changed, 2 insertions, 1 deletions

diff --git a/RyanThinkpad.scm b/RyanThinkpad.scm
index 5ca1cf6..f27974d 100644
--- a/RyanThinkpad.scm
+++ b/RyanThinkpad.scm
@@ -25,7 +25,8 @@
                                        'fat32))
                          (type "vfat")) %base-file-systems))
   (bootloader (bootloader-configuration
-                (bootloader uefi-uki-bootloader)
+                (bootloader (uefi-uki-signed-bootloader
+                    "/var/lib/sbctl/keys/db/db.pem" "/var/lib/sbctl/keys/db/db.key"))
                 (targets (list "/boot/efi"))
                 (keyboard-layout (keyboard-layout "us"))))
   (swap-devices