feat(configuration): add Secure Boot tasks for shim and sbctl

2026-04-02 04:36:24 +02:00
parent 57417514e3
commit ceb11852ec
4 changed files with 182 additions and 0 deletions
--- a/roles/configuration/tasks/main.yml
+++ b/roles/configuration/tasks/main.yml
@@ -17,6 +17,8 @@
    - file: encryption.yml
      when: "{{ system_cfg.luks.enabled | bool }}"
    - file: bootloader.yml
+    - file: secure_boot.yml
+      when: "{{ system_cfg.features.secure_boot.enabled | bool }}"
    - file: extras.yml
    - file: network.yml
    - file: users.yml