From f1bc773106aae04b7f622e72cbfd1650c24b1ed7 Mon Sep 17 00:00:00 2001
From: Ryan Schanzenbacher <ryan@rschanz.org>
Date: Thu, 6 Feb 2025 00:52:51 -0500
Subject: [PATCH] enabled secure boot on the thinkpad

---
 RyanThinkpad.scm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/RyanThinkpad.scm b/RyanThinkpad.scm
index 5ca1cf6..f27974d 100644
--- a/RyanThinkpad.scm
+++ b/RyanThinkpad.scm
@@ -25,7 +25,8 @@
                                        'fat32))
                          (type "vfat")) %base-file-systems))
   (bootloader (bootloader-configuration
-		(bootloader uefi-uki-bootloader)
+		(bootloader (uefi-uki-signed-bootloader
+                    "/var/lib/sbctl/keys/db/db.pem" "/var/lib/sbctl/keys/db/db.key"))
 		(targets (list "/boot/efi"))
 		(keyboard-layout (keyboard-layout "us"))))
   (swap-devices