From d324d5d4176f06945582eb3f8a9a31bceddf3907 Mon Sep 17 00:00:00 2001
From: KJ Tsanaktsidis <kj@kjtsanaktsidis.id.au>
Date: Wed, 7 Jan 2026 21:50:47 +1100
Subject: delete the enrol

---
 labsrv01/secureboot.nix | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/labsrv01/secureboot.nix b/labsrv01/secureboot.nix
index 1e4d171..cc8ec2e 100644
--- a/labsrv01/secureboot.nix
+++ b/labsrv01/secureboot.nix
@@ -38,14 +38,6 @@
     script = ''
       echo "Creating Secure Boot keys..."
       ${pkgs.sbctl}/bin/sbctl create-keys
-
-      # Check if we're in Setup Mode
-      if ${pkgs.sbctl}/bin/sbctl status | grep -q "Setup Mode"; then
-        echo "UEFI is in Setup Mode, enrolling keys..."
-        ${pkgs.sbctl}/bin/sbctl enroll-keys --microsoft
-      else
-        echo "WARNING: UEFI is not in Setup Mode. Please clear Secure Boot keys in UEFI and reboot."
-      fi
     '';
   };
 }
-- 
cgit v1.2.3