(In reply to Ludwig Nussel from comment #5) > (In reply to Michael Chang from comment #4) > > (In reply to Ludwig Nussel from comment #2) > Can we keep those as modules but don't duplicate the rest? So the same > grub.efi is used in both SB as well as no SB case, just that when booted in > the latter mode it would allow to load extra stuff? I am not sure if the optimization is welcome by everyone. It would break if two grub installed in parallel, that is signed monolithic grub.efi and unsigned micro grubx64.efi. Some people would keep grubx64.efi as fallback or making some fun out of it, like to play with signed grub module by their own pgp key ...