New comment by Duncaen on void-packages repository https://github.com/void-linux/void-packages/pull/46165#issuecomment-1729885218 Comment: You have to first create keys and enroll, some users might want to sign kernel with sbctl and move/rename them instead of modifying the tracked binary. aarch64 supports efi and the kernel binaries are uncompressed and named `vmlinux`, the `efibootmgr` hook is not very good for multiple reasons.