Secure-Boot
guest@6admin.io:~$ ls ~/tags/secure-boot
The boot chain, from GRUB to UKI
Why Canonical is trimming signed GRUB for 26.10, why GRUB-encrypted /boot was a false friend and what the modern answer to the Evil Maid attack actually looks like.
Secure Boot and PXE: the chicken, the egg and four ways out
Booting blank Windows machines over PXE with Secure Boot on, without turning it off: the UEFI chain of trust, why snponly over ipxe and four real ways out of the enrollment paradox.