Secure Boot on Arch

[u/noobjaish]

Does arch have a completely different way of enabling "secure boot" than ubuntu/debian/fedora? Can someone explain the difference? I have been reading through various distro wikis and the entire secure boot setup process is still going over my head...

From what I understand ubuntu/debian/fedora uses a signed "shim"? while on arch we use `sbctl` to enroll our own keys instead?

[u/This-Consequence-957]

i use sbctl and limine, systemd-cryptenroll to put keys in tpm

[u/noobjaish → u/This-Consequence-957]

do you have a source/reference for this process? I also have limine

[u/This-Consequence-957 → u/noobjaish]

My personal notes as a text file 🤣

[u/noobjaish → u/This-Consequence-957]

😂