test

nixos/common/modules/bootloader.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }: { 
+    # Bootloader
+    boot.loader.efi.canTouchEfiVariables = true;
+    boot.tmp.cleanOnBoot = true;
+    boot.initrd.systemd.enable = true;
+    boot.kernelParams = ["quiet"];
+ }

nixos/common/modules/secureboot.nix

@@ -1,4 +1,8 @@
 { lib, config, pkgs, ...}: {
+
+  imports = [ ./bootloader.nix ];
+  # SecureBoot
+  boot.loader.systemd-boot.enable = lib.mkForce false;
   boot.lanzaboote.enable = true;
   boot.lanzaboote.pkiBundle = "/etc/secureboot";
 
@@ -7,4 +11,10 @@
   # https://github.com/adi1090x/plymouth-themes
   boot.plymouth.theme = "red_loader";
   boot.plymouth.themePackages = [ pkgs.adi1090x-plymouth-themes ];
+
+  # Bootloader
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.tmp.cleanOnBoot = true;
+  boot.initrd.systemd.enable = true;
+  boot.kernelParams = ["quiet"];
 }

nixos/default.nix

@@ -24,15 +24,6 @@
       ./hosts/${hostname}
     ] ++ lib.optional (builtins.isString desktop) ./common/desktops/${desktop};
 
-    # Bootloader
-    boot.loader.efi.canTouchEfiVariables = true;
-    boot.tmp.cleanOnBoot = true;
-    boot.initrd.systemd.enable = true;
-    boot.kernelParams = ["quiet"];
-
-    # SecureBoot
-    boot.loader.systemd-boot.enable = lib.mkForce false;
-
   # List packages installed in system profile
   environment.systemPackages = with pkgs; [
     sbctl

nixos/hosts/nixos-vm-02/default.nix

@@ -1,5 +1,9 @@
 { config, lib, pkgs, modulesPath, desktop, username, ... }: {
-  imports = [ ./disks.nix ];
+  imports = [ 
+    # This machine won't be using secureboot
+    ../../common/modules/bootloader.nix
+    ./disks.nix 
+  ];
   nixpkgs.config.allowUnfree = false;
 
   boot.initrd.availableKernelModules = [ "ata_piix" "ohci_pci" "ehci_pci" "ahci" "sd_mod" "sr_mod" ];