From 5aa39c926183b9371bfc738d50c00632a61c018e Mon Sep 17 00:00:00 2001
From: killeik <69602482+killeik@users.noreply.github.com>
Date: Sun, 5 Oct 2025 23:13:16 +0300
Subject: [PATCH] Simple check to prevent secure boot issues (#2145)

---
 install/preflight/guard.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/preflight/guard.sh b/install/preflight/guard.sh
index 60a6c873..3ea3d68f 100644
--- a/install/preflight/guard.sh
+++ b/install/preflight/guard.sh
@@ -18,6 +18,9 @@ done
 # Must be x86 only to fully work
 [ "$(uname -m)" != "x86_64" ] && abort "x86_64 CPU"
 
+# Must have secure boot disabled
+bootctl status 2>/dev/null | grep -q 'Secure Boot: disabled' || abort "Secure Boot disabled"
+
 # Must not have Gnome or KDE already install
 pacman -Qe gnome-shell &>/dev/null && abort "Fresh + Vanilla Arch"
 pacman -Qe plasma-desktop &>/dev/null && abort "Fresh + Vanilla Arch"