I know some distributions support secure boot, but Arch / Manjaro not? Installed Manjaro on my Microsoft Surface Pro 4 and most parts works fine with linux-surface kernel! Because just testing I ignored secure boot by disabling it. VanillaOS worked fine out of the box with secure boot.
Found a arch linux article how to install it, but postboned to configure it until I understand how to install and configure it without breaking my installation.
It can be done - it requires some work on your part.
It is quite possible it can be done without reinstalling - I have not done so - but it should be possible.
What I have done → [root tip] [Utility Script] Encrypted Manjaro Linux using Verified Boot
If your system is not encrypted then secure boot is not worth the effort.
Hi @linux-aarhus,
thanks! I’ll take a closer look! First findings…
Enable secure boot … boot using Manjaro Linux ISO
With secure boot enabled boot ISO from usb failed?
Ensure Secure Boot is in setup mode
How? I can de-/activate, but haven’t seen any setup mode?
Surface show a big red banner if powered on with deactivated secure boot… Don’t looks nice… But yes, it’s just cosmetic…
Yes - that is per design - the loader is not in the database
Usually in the firmware there is an option to alter the status - but as Surface is MS branded I don’t know.
You can also read for secure boot in the arch wiki, the section for sbctl. But that means the kernels have to be on the ESP partition, so it have to be big enough, and fat32.