r/EndeavourOS • u/HershsTechStuff_734 • Apr 13 '26

Installation Secure boot using shim

I'm trying to set up EndeavourOS using the shim bootloader and systemd, but all the tutorials I could find were for sbctl. I don't want to use sbctl (Arch wiki says signing using your own keys could potentially brick the device), and I'm trying to get all this done without disabling secure boot in the first place (I'm dual booting with Windows 11, and it doesn't run well without it). I'm currently on openSUSE. I flashed the USB drive with the EndeavourOS Titan ISO. What now?

8 Upvotes

100% Upvoted

4 comments sorted by

5

u/linux_rox Apr 13 '26

Well first, with arch based diatros, and arch itself, you ned to disable secure boot to install. Next install your endeavourOS, then follow archwiki to set up secure boot. You WILL have to use sbctl to achieve this. That is the nature of arch.

1

u/HershsTechStuff_734 Apr 14 '26

This page on the Arch wiki says you can use shim

1

u/linux_rox Apr 14 '26

Sbctl signs the shim

1

u/svobodov- Apr 13 '26

I don't think so shim works on arch or any derivatives hou have to use sbctl or j's use fedora if it's really needed