We already don't install variables because we're operating on a
root directory, but if we set --no-variables we don't get warnings
from bootctl about it.
die("One of sbsign or pesign is required to use SecureBoot=")
with complete_step("Installing boot loader…"):
- run(["bootctl", "install", "--root", state.root, "--all-architectures"],
+ run(["bootctl", "install", "--root", state.root, "--all-architectures", "--no-variables"],
env={"SYSTEMD_ESP_PATH": "/efi"})
if state.config.secure_boot: