From 28d3e3c3ca1f547d7616b54d9be31151c50bc6d8 Mon Sep 17 00:00:00 2001
From: Robert Kolchmeyer <rkolchmeyer@google.com>
Date: Thu, 30 Apr 2026 10:57:11 -0700
Subject: [PATCH] cos-disable-algif-aead: do not fail pod when SB is enabled

This results in CrashLoopBackOff, which is suboptimal. Sleep instead,
and exit 0 if the sleep dies.
---
 disable-algif-aead/cos-disable-algif-aead.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/disable-algif-aead/cos-disable-algif-aead.yaml b/disable-algif-aead/cos-disable-algif-aead.yaml
index e0a358b..dcbaa67 100644
--- a/disable-algif-aead/cos-disable-algif-aead.yaml
+++ b/disable-algif-aead/cos-disable-algif-aead.yaml
@@ -70,7 +70,8 @@ spec:
             rmdir "${efi}"
             if [[ "${secure_boot}" == "True" ]]; then
               echo "Secure Boot is enabled. Boot options cannot be changed."
-              exit 1
+              sleep inf
+              exit 0
             fi
           }