From c03ba949ea0521a76a20ca97359663cec2088d2d Mon Sep 17 00:00:00 2001
From: Tommy <contact@tommytran.io>
Date: Sun, 2 Jun 2024 10:38:49 -0700
Subject: [PATCH] Default to linux-hardened

Signed-off-by: Tommy <contact@tommytran.io>
---
 install.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install.sh b/install.sh
index 9f97cd1..0e19e7b 100644
--- a/install.sh
+++ b/install.sh
@@ -408,7 +408,10 @@ if [ "${use_luks}" = '1' ]; then
     sed -i 's/#GRUB_ENABLE_CRYPTODISK=.*/GRUB_ENABLE_CRYPTODISK=y/g' /mnt/etc/default/grub
 fi
 echo '' >> /mnt/etc/default/grub
-echo '# Booting with BTRFS subvolume
+echo '# Default to linux-hardened
+GRUB_DEFAULT="1>2"
+
+Booting with BTRFS subvolume
 GRUB_BTRFS_OVERRIDE_BOOT_PARTITION_DETECTION=true' >> /mnt/etc/default/grub
 
 ## Disable root subvol pinning.