Pope Bob the Unsane<p>In the adventures of Bob's "Perfect" <a href="https://kolektiva.social/tags/Slackware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Slackware</span></a> install, I've been struggling to get Secure Boot working on my <a href="https://kolektiva.social/tags/Thinkpad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Thinkpad</span></a> x280.</p><p>Something seems to be preventing me from loading a custom Platform Key, while none appears loaded, and everything seems 'right' -- <a href="https://kolektiva.social/tags/SecureBoot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecureBoot</span></a> is in Custom / Setup mode.</p><p>The unfortunate thing is ... using Secure Boot and signing kernel images and efi executables is not a common practice, and the documentation seems lacking explanations for people with my particular issue; method 1 of using `efi-updatevar` returns an error "Cannot write to PK, wrong filesystem permissions", method 2 -- updating from the <a href="https://kolektiva.social/tags/UEFI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>UEFI</span></a> 'bios' -- is not an option on an x280, and method 3, using KeyTool.efi returns the error "Failed to update variable: (26) Security Violation".</p><p>I am wondering if there are some further setup settings that need to be adjusted to allow this operation, if perhaps my pk.auth file is incorrect in some way, if my machine was, from the factory, unable to allow custom Platform Keys, or if someone has modified it since then.</p><p>Rabbit holes are a pain in the dick, and now I'm in a position where I'm kinda 'forced' to learn a bit more about the mechanics of Secure Boot, under the hood.</p><p>Anyone got some good tips for where to start solving this puzzle?</p><p>I have been referencing:</p><p>- <a href="https://wiki.gentoo.org/wiki/User:Sakaki/Sakaki%27s_EFI_Install_Guide/Configuring_Secure_Boot_under_OpenRC" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">wiki.gentoo.org/wiki/User:Saka</span><span class="invisible">ki/Sakaki%27s_EFI_Install_Guide/Configuring_Secure_Boot_under_OpenRC</span></a><br>- <a href="https://wiki.linuxquestions.org/wiki/How_to_use_Secure_Boot_with_your_own_keys" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">wiki.linuxquestions.org/wiki/H</span><span class="invisible">ow_to_use_Secure_Boot_with_your_own_keys</span></a></p><p><a href="https://kolektiva.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Linux</span></a> <a href="https://kolektiva.social/tags/Troubleshooting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Troubleshooting</span></a> <a href="https://kolektiva.social/tags/Puzzle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Puzzle</span></a></p>