When have windows as dual boot then only this happens?

errr no the logo is actually a boob.

Apart from the one on the wiki?

https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

I mean yes a lot of arch linux users are that sometimes lel

better not doing it cuz you’ll lose ability to hibernate

yep from there i kindda understood how this all works
but want something that i do once and then it automatically get done after updates

pacman hook

okay

Like https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Automatic_signing_with_the_pacman_hook ?

due to some bitlocker security issues when lockdown is disabled linux is unable hibernate with secure boot

aah thanks mate

when have windows as dual boot then only this happens?

no, always

lockdown is a new thing to me
i mostly use suspend

lockdown is basically a state, not a shutdown option

This is incorrect

You can use secure boot

well lockdown can be disabled but afaik kernel has to be recompiled

There’s no need to disable anything. I’m using SB right now without needing to touch lockdown.

errr
how then…

I use my own keys

so? how does that solve the problem?

I’m using Arch Linux stock kernel, it has no LSM lockdown

oh) I see

Nvm, it seems it has:
zcat /proc/config.gz | grep CONFIG_SECURITY_LOCKDOWN_LSM
CONFIG_SECURITY_LOCKDOWN_LSM=y

oh, understandable then

But you can use SB just fine, even more so if you don’t dual boot with windows