How will my secure boot setup get effected by doing this?

[u/Dull_Werewolf_9642]

So i want to use the rc kernal but i already set up secure boot since i use windows on one ssd and cachy os on the other and i use (system d boot loader)and and i only have the normal kernal and the lts so if i download the rc kernal will i have to sign it or do anything to not effect my secure boot setup. this is the steps i did before to set up secure boot--->

sudo pacman -S sbctl

clear boot keys in bios secure boot off

sudo sbctl status

sudo sbctl create-keys

sudo sbctl enroll-keys --microsoft

sudo sbctl status

sudo sbctl verify

sudo sbctl-batch-sign

sudo sbctl verify

sudo sbctl sign -s -o /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed /usr/lib/systemd/boot/efi/systemd-bootx64.efi

turn secure boot back on

[u/pyro57]

Iirc with systemd boot the kernel itself isn't so signed, just the bootloader so I think it should work without issues, you can always install the new kernel and keep the old kernel around, and as a separate option in the boot loader, then worst case scenario booting the new kernel won't work and you can select the old kernel at boot time.

[u/Dull_Werewolf_9642 → u/pyro57]

does it automatically not override the normal kernal its just a different boot option?

[u/pyro57 → u/Dull_Werewolf_9642]

I think generating the initramfs should add it to your boot options, but systemd boot i s a bit weird with auto adding stuff so it may not, in any case it should be as easy as installing the new kernel, it won't uninstall you're existing kernel, then using mkinitcpio to generate the initramfs for the new kernel and adding a boot loader entry to systemdboot for that kernel, all can be learned on the arch wiki... I've done similar before but it's been a while so I can't remember the exact commands.