all large distros are using shim which supports secure boot you can also enroll your own key relatively easily using mokutil if you're building your own kerne

all large distros are using shim which supports secure boot you can also enroll your own key relatively easily using mokutil if you're building your own kernels it's one command to sign them (sbsign)