I think this is a misunderstanding. I've said secure boot is much more difficult in case kernel and initrd are separate. In case of a UKI it's very simple of c

I think this is a misunderstanding. I've said secure boot is much more difficult in case kernel and initrd are separate. In case of a UKI it's very simple of course. Just sign the boot image. That's why I love the UKI. :-)