On 08/29/2015 03:20 AM, Tom H wrote:
grub2-install works on non-SB systems. And there's no reason that it shouldn't work on SB systems. Aren't the grub and shim executables simply copied from "/usr/something"? So they should be signed.
Not according to the documentation, which indicates that: "grub2-install shouldn't be used on EFI systems. The grub2-efi package installs a prebaked grubx64.efi on the EFI System partition, which looks for grub.cfg on the ESP in /EFI/fedora/ whereas the grub2-install command creates a custom grubx64.efi, deletes the original installed one, and looks for grub.cfg in /boot/grub2/."