This question isn’t specific to clearlinux. Any online guide that explains how to sign and use your own keys is adequate and covers the topic well.
First of all.
If any online doc gives complete information then why your several team mans give conflicting information:
- We don’t support secure boot
- No, we don’t support ms shim, but support own (afiak! but better ask other man)
- Link to article about disable secure boot…
If it’s so simple why you can’t explain in that simple?
Enrolling your signatures in custom secure boot mode is not the same kernel validation at runtime (afaik), and my basic question was about it. (Maybe I wrong, clear to me, but better detailed describe in official Doc)
No it’s not a simple question but important (at least for appear in doc), I don’t ask casual info about trivial usage of common Linux. You have you own architecture and build and users deserve for know about it.
I gave an example with Ubuntu that explain it with
mokutil with certain params, that enables lockdown. CL doesn’t have this util and no any info about similar and you just skip this important question.