494 B
494 B
securebootsign
Create new keys for secureboot
https://wiki.archlinux.org/index.php/Unified_Extensible_Firmware_Interface/Secure_Boot#Creating_keys
Create new combined signed EFI image
./signkernels.sh
Remount efivars writable
moutn -o remount,rw /sys/firmware/efi/efivars
Create boot entry
efibootmgr --create /dev/sda --part 1 --label ArchLinux_combined --loader EFILinuxvmlinuz-linux.efi --verbose
sign automatically after updates
cp 96-signkernels.hook /etc/pacman.d/hooks/