tp3: disable/rm lanzaboote

flake.nix

@@ -56,14 +56,6 @@
       url = "github:nix-community/home-manager/master";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    lanzaboote = {
-      url = "github:nix-community/lanzaboote/v0.3.0";
-      inputs.flake-compat.follows = "flake-compat";
-      inputs.flake-parts.follows = "flake-parts";
-      inputs.flake-utils.follows = "flake-utils";
-      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.pre-commit-hooks-nix.follows = "pre-commit-hooks";
-    };
     nvim-config = {
       url = "github:elohmeier/nvim-config";
       inputs.devshell.follows = "devshell";
@@ -155,7 +147,6 @@
   #   , disko
   #   , flake-utils
   #   , home-manager
-  #   , lanzaboote
   #   , nixos-hardware
   #   , nixpkgs
   #   , nixpkgs-unstable

modules/nixos/default.nix

@@ -97,7 +97,6 @@ in
     tp3 = nixosSystemFor "x86_64-linux" [
       inputs.disko.nixosModules.disko
       inputs.home-manager.nixosModule
-      inputs.lanzaboote.nixosModules.lanzaboote
       inputs.nix95.nixosModules.nix95
       inputs.sops-nix.nixosModules.default
       self.nixosModules.defaults

modules/nixos/tp3/default.nix

@@ -10,39 +10,39 @@
     ./modules/disko.nix
   ];
 
+  networking.hostName = "tp3";
   networking.hostId = "c1acffeb";
 
   system.stateVersion = "24.11";
-  networking.hostName = "tp3";
+
   ptsd.tailscale.enable = true;
+
   programs.fish.enable = true;
+
   time.timeZone = "Europe/Berlin";
+
   services.pipewire = {
     enable = true;
     alsa.enable = true;
     alsa.support32Bit = true;
     pulse.enable = true;
   };
+
   services.fwupd.enable = true;
+
   boot = {
     kernelParams = [
       "mitigations=off" # make linux fast again
       "acpi_backlight=native" # force thinkpad_acpi driver
       "amd_pstate=active"
     ];
 
-    # lanzaboote = {
-    #   enable = true;
-    #   pkiBundle = "/nix/persistent/etc/secureboot";
-    #   configurationLimit = 7;
-    # };
-
     loader = {
       systemd-boot.enable = true;
-      # systemd-boot.enable = lib.mkForce false; # replaced by lanzaboote
       systemd-boot.editor = false;
       efi.canTouchEfiVariables = true;
     };
+
     initrd = {
       availableKernelModules = [
         "ahci"
@@ -117,7 +117,6 @@
     pkgs.libcanberra-gtk3
     pkgs.powertop
     pkgs.python3 # required by proton (steam)
-    pkgs.sbctl
     pkgs.vulkan-tools
     pkgs.wirelesstools
   ];