Another nostrich helped me figure out what was wrong (mostly secure boot was enabled 🙄), but there are still some issues with umbrel itself, but that's a problem for another day.