Been down the rabbit hole lately of UEFI Secure Boot issues, and decided to write an overview of how it works out-of-the-box in the excellent Debian-based Linux Mint LMDE 6.
Have mostly been researching this stuff as I was looking to replace GRUB entirely with systemd-boot on one of my systems. Will likely write a follow-up piece documenting that journey if I think it’d be interesting to some nerds out there.
Good question! There’s a few reasons, I guess:
All boils down to my enjoyment of doing weird nerdy things though, ultimately. =)
In the interest of politeness I reserved my initial reaction of absolute horror that this would even be attempted by systemd.
sysd boot doesn’t just sign itself.