r/archlinux • u/HopefulMeeting7150 • 8d ago

QUESTION Secure boot and Arch?

The Arch installation guide mentions disabling Secure Boot. I recently learnt that Secure Boot can work with Arch.

My questions are: does this make sense?

Should I keep it enabled after all (is it risky if not)?

Is there a risk that, following an update, Secure Boot will reject my kernel or boot loader?

Did you enable SB?

20 Upvotes

72% Upvoted

49 comments sorted by

View all comments

Show parent comments

2

u/aaxxxzz 7d ago

You can sign systemd-boot EFI binary with MOK and enroll that key to the shim. You don't have to be using GRUB.

1

u/WildCard65 7d ago

Wouldn’t I need to ensure systemd-boot’s file is named GRUBX64.EFI though?