On Wed, Jul 5, 2023 at 9:41 AM Richard Rahl <rrahl0@proton.me> wrote:
Yes, leap 15.5 is fine in booting with SB enabled. Also any other distro I tried works fine (debian11 and debian12)
https://bugzilla.suse.com/show_bug.cgi?id=1209985 Leap shim installs the permanent UEFI variable that blacklists too old shim still used in Tumbleweed. This variable is boot time only (you cannot remove it from within loaded Linux), you must use mokutil. It is possible to remove this variable and set another variable that will prevent shim from installing too aggressive a policy. You need a live image with recent enough shim and mokutil. But yes, right now Leap and Tumbleweed on the same system with secure boot is a challenge. It may change after kernel 6.4 is released (this kernel implements lockdown with Secure Boot which is the mandatory requirement for Mirosoft to sign new shim).