Mainly From: https://github.com/jakeday/linux-surface/blob/master/SIGNING.md
Instructions are for ubuntu, but should work similar for other distros, if they are using shim
and grub as bootloader. If your distro is not using shim (e.g. Linux Foundation Preloader), there
should be similar steps to complete the signing (e.g. HashTool instead of MokUtil for LF Preloader)
or you can install shim to use instead. The ubuntu package for shim is called shim-signed
, but
please inform yourself on how to install it correctly, so you do not mess up your bootloader.