This how to aims to make UEFI boot your signed kernel+initramfs directly, without a bootloader like grub or system-boot. As a pre-requisite, you should log in to your UEFI settings and set SecureBoot into Setup Mode.
- Check EFI partition size, if you want to include extra drivers in
initrd(likenvidia), make it at least 1gb. I recommend 2gb to be future-proof. - Include extra drivers in
/etc/mkinitcpio.conf. You neednvidia-dkmsinstalled for this to work. I wanted to include this in my system so SDDM (the Login Screen itself) can run in Wayland. Important: Make sureFILESsection doesn't include/crypto_keyfile.binas it should not be included in the initramfs on the unencrypted EFI.