Run this to sign your bootloader:
Then open your BIOS and follow whatever chain of clicks to enroll loader.efi as a key. It's that simple!
This is based off of some help I once gave someone in a thread (which itself was based off of some docs with unnecessary steps and confusing layout/syntax that I simplified), but I am putting it here so more people can find it.
Code:
cd /boot && sh /usr/share/examples/uefisign/uefikeys testcert && uefisign -c testcert.pem -k testcert.key -o signed-binary loader.efiThis is based off of some help I once gave someone in a thread (which itself was based off of some docs with unnecessary steps and confusing layout/syntax that I simplified), but I am putting it here so more people can find it.