Use non-secureboot

roles/home-cli/files/virtinst.sh

@@ -8,6 +8,7 @@ else
     _acp_vm_session=qemu:///session
 fi
 _acp_vm_name=${1:---help}
+_acp_vm_distro=$(. /etc/os-release; echo $ID)
 
 case "$_acp_vm_name" in
     "--help" | -*)
@@ -24,11 +25,20 @@ then
     mkdir -p "$_acp_vm_root"
 fi
 
+case "$_acp_vm_distro" in
+    "debian")
+        _acp_vm_boot=loader=/usr/share/OVMF/OVMF_CODE.fd,loader.readonly=yes,loader.type=pflash,nvram.template=/usr/share/OVMF/OVMF_VARS.fd,loader_secure=no
+        ;;
+    *)
+        _acp_vm_boot=uefi
+        ;;
+esac
+
 # To get a list of valid osinfo options, run:
 #   virt-install --osinfo list
 virt-install --connect $_acp_vm_session \
     --osinfo linux2022 \
-    --boot uefi \
+    --boot $_acp_vm_boot \
     --cpu host-passthrough \
     --disk "$_acp_vm_root/$_acp_vm_name.qcow2,size=20" \
     --graphics vnc \