It is posible to use Secure Boot in dual boot out of the box?

[stefanwimmer128]

@ernie

sudo grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id=garudaos --modules=“tpm” --disable-shim-lock

I changed the --bootloader-id=cachyos to --bootloader-id=garudaos.

The bootloader id should be garuda not garudaos.

@ernie

Second, I used nano, which must be installed using sudo pacman -S nano to create the sbctl-batch-sign script with sudo nano /usr/bin/sbctl-batch-sign, then copying/pasting the script’s content below:

Such a script is not really needed since it only needs to be run once and it can be replaced with just 2 commands:

sbctl verify | sed 's/^✗ \(.*\) is not signed$/sbctl sign -s \1/e'
find /boot/vmlinuz-* | xargs -n1 sbctl sign -s

Here is a short guide for Garuda Linux: Secureboot - #3 by stefanwimmer128
Here is a longer write up: Secure Boot Guide