feat(global_defaults): add secure_boot feature toggle with normalization

2026-04-02 04:33:07 +02:00
parent b11d65a6f3
commit 6d622f2db4
2 changed files with 6 additions and 0 deletions
--- a/roles/global_defaults/defaults/main.yml
+++ b/roles/global_defaults/defaults/main.yml
@@ -141,6 +141,9 @@ system_defaults:
      enabled: false
      environment: ""       # gnome|kde|xfce|sway|hyprland|cinnamon|mate|lxqt|budgie
      display_manager: ""   # auto from environment when empty; override: gdm|sddm|lightdm|greetd
+    secure_boot:
+      enabled: false
+      method: ""            # arch only: sbctl (default) or uki; ignored for other distros

 # Per-hypervisor required fields — drives data-driven validation.
 # All virtual types additionally require network bridge or interfaces.