{config, ...}: {
  boot = {
    lanzaboote = {
      enable = false;
      pkiBundle = "/var/lib/sbctl";
    };
    loader = {
      efi.canTouchEfiVariables = true;
      systemd-boot = {
        enable = !config.boot.lanzaboote.enable;
        consoleMode = "auto";
      };
    };
  };
}