https://bugzilla.suse.com/show_bug.cgi?id=1205588 https://bugzilla.suse.com/show_bug.cgi?id=1205588#c1
--- Comment #1 from Joey Lee jlee@suse.com --- I have tested kernel in kernel-default-6.0.8-1.1.x86_64 rpm for openSUSE TW. It also works for booting with PcdDxeNxMemoryProtectionPolicy=0x4. But the same kernel can not boot with grub2-x86_64-efi-2.06-31.1.noarch.
I will put shim to openSUSE:Factory and also produce a OVMF with PcdDxeNxMemoryProtectionPolicy=0x7BD4 for debugging.