sicherboot
sicherboot copied to clipboard
Sign the default/fallback loader
Apart from installing systemd-boot at /EFI/systemd/, bootctl also installs a default/fallback loader at /EFI/BOOT/BOOT.EFI. Sign this loader too.