This how to aims to make UEFI boot your signed kernel+initramfs directly, without a bootloader like grub or system-boot. As a pre-requisite, you should log in to your UEFI settings and set SecureBoot into Setup Mode.
- Check EFI partition size, if you want to include extra drivers in
initrd
(likenvidia
), make it at least 1gb. I recommend 2gb to be future-proof. - Include extra drivers in
/etc/mkinitcpio.conf
. You neednvidia-dkms
installed for this to work. I wanted to include this in my system so SDDM (the Login Screen itself) can run in Wayland. Important: Make sureFILES
section doesn't include/crypto_keyfile.bin
as it should not be included in the initramfs on the unencrypted EFI.