Untitled

❯ sudo sbctl create-keys
Created Owner UUID 47bf1b4b-e158-4971-acd5-e3239d390f12
✓ Secure boot keys have already been created!

~
❯ sudo sbctl enroll-keys -m
Enrolling keys to EFI variables...
With vendor keys from microsoft...✓
Enrolled keys to the EFI variables!

~
❯ sudo sbctl status
Installed:	✓ sbctl is installed
Owner GUID:	47bf1b4b-e158-4971-acd5-e3239d390f12
Setup Mode:	✗ Enabled
Secure Boot:	✗ Disabled
Vendor Keys:	microsoft

~
❯ sudo sbctl verify
Verifying file database and EFI images in /boot/efi...
✓ /boot/efi/EFI/GRUB/grubx64.efi is signed
✓ /boot/efi/EFI/boot/bootx64.efi is signed
✓ /boot/efi/EFI/cachyos/grubx64.efi is signed
✓ /boot/vmlinuz-linux-cachyos is signed
✓ /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed is signed

~
❯ sudo sbctl-batch-sign
File has already been signed /boot/vmlinuz-linux-cachyos

~
❯ sudo sbctl verify
Verifying file database and EFI images in /boot/efi...
✓ /boot/efi/EFI/boot/bootx64.efi is signed
✓ /boot/efi/EFI/cachyos/grubx64.efi is signed
✓ /boot/vmlinuz-linux-cachyos is signed
✓ /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed is signed
✓ /boot/efi/EFI/GRUB/grubx64.efi is signed

~
❯ sudo sbctl status
Installed:	✓ sbctl is installed
Owner GUID:	47bf1b4b-e158-4971-acd5-e3239d390f12
Setup Mode:	✗ Enabled
Secure Boot:	✗ Disabled
Vendor Keys:	microsoft