diff --git a/faucet/boot/default.nix b/faucet/boot/default.nix
index 3b2b70bf..7c197629 100644
--- a/faucet/boot/default.nix
+++ b/faucet/boot/default.nix
@@ -23,7 +23,7 @@ in {
     };
 
     # symlink for sbctl
-    environment.etc.secureboot = mkIf cfg.lanzaboote { source = sbPath; };
-    #environment.systemPackages = optional cfg.lanzaboote pkgs.sbctl;
+    environment.etc.secureboot.source = sbPath;
+    environment.systemPackages = [ pkgs.sbctl ];
   };
 }