Factoids

grub-sb:

  1. apt --yes install grub-efi-amd64-signed shim-signed && grub-install --uefi-secure-boot