From 1ffed127dbd6f139588309f3f8f938dcc0ae4ddb Mon Sep 17 00:00:00 2001
From: David Heinemeier Hansson <david@hey.com>
Date: Tue, 7 Oct 2025 13:01:22 +0200
Subject: [PATCH] Invert the logic to only fail when we know for sure secure
 boot is on

---
 install/preflight/guard.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/preflight/guard.sh b/install/preflight/guard.sh
index 3ea3d68f..90bbf4ee 100644
--- a/install/preflight/guard.sh
+++ b/install/preflight/guard.sh
@@ -19,7 +19,7 @@ done
 [ "$(uname -m)" != "x86_64" ] && abort "x86_64 CPU"
 
 # Must have secure boot disabled
-bootctl status 2>/dev/null | grep -q 'Secure Boot: disabled' || abort "Secure Boot disabled"
+bootctl status 2>/dev/null | grep -q 'Secure Boot: enabled' && abort "Secure Boot disabled"
 
 # Must not have Gnome or KDE already install
 pacman -Qe gnome-shell &>/dev/null && abort "Fresh + Vanilla Arch"