📚 Surprised positively at how seamless secure boot enrollment is on modern laptops.

One of the things I really liked about distributions like Fedora and Ubuntu are the fact that they have secure boot enabled by default. In distributions like Arch, I had previously looked at the wiki page for secure boot, nope'd out, and completely avoided ever enabling it. But someone recently directed me to Foxboron's sbctl, which has made the process completely seamless.

I just typed in 4 commands found on the github README, rebooted, reset my keys in my laptop's bios, rebooted again, re-ran the enrollment command, signed my keys, and rebooted into a secure boot-enabled system with no issues. Big props to those working around these edge cases of end-user security.