Debian will likely ship a GRUB with proper SBAT lines — maybe in the next point release or Debian 14.
Until then, every new laptop with the updated dbx revocations and stricter SBAT enforcement will reject Debian’s signed GRUB unless you set previous policy. This is making me very sad. Linux gets me, yet again.
Seirdy
in reply to Seirdy • • •