[Unit]
Description=Enroll Arcline secure boot MOK (one-time)
Documentation=docs/secureboot.md
DefaultDependencies=no
Before=sysinit.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/arcline-mok-enroll.sh
RemainAfterExit=yes

[Install]
WantedBy=sysinit.target