Saw a lot of people get nailed by this in the Framework community. On the flip-side, if you eschew Microsoft products completely, I've had a really good experi

Saw a lot of people get nailed by this in the Framework community. On the flip-side, if you eschew Microsoft products completely, I've had a really good experience (for the most part) using Secure Boot with custom keys on Linux on my Framework 13 AMD laptop. I am using Arch, and have it setup to build UKIs that are signed automatically via a post-build hook using `sbctl` and EFI booting using systemd-boot. As much as I generally dislike SystemD, if you go all-in on it, it does work relatively well on modern hardware. Shim is really only required on Linux when dual-booting, and really only because the entire Trusted Computing Platform architecture is not user-centric and is designed around the needs of Microsoft more than any other entity. But because they at least paid lip-service to users, you have the ability to just eliminate Microsoft keys entirely on your system and go all-in on custom Secure Boot w/ Linux. I am hard-pressed to find a reason for any moderately technical user to still be running Windows in 2024, as most important productivity tools are primarily or at least optionally web-based, and Linux is significantly better in every other capacity.