any plans for shim + MOK secure boot support for VE installations on ZFS with systemd-boot?

sqenixs

New Member
Jun 23, 2025
4
0
1
It is my understanding that currently the only way you can get secure boot with zfs and systemd-boot is to create custom secure boot keys. I am not willing to do that right now. And by using grub I am losing features of ZFS that I want. What are my options here?
 
what features of ZFS are you losing if you use Grub? the PVE installer will use Grub managed by proxmox-boot-tool automatically if you select ZFS and secure boot is enabled, other than the efi binary used to load the kernel there is virtually no difference from a user's perspective other than the boot entry selection menu looking different ;) in particular, it makes no difference w.r.t. how ZFS is set up.

we do plan on evaluating signing systemd-boot as well at some point and integrate support for that in our installer and proxmox-boot-tool.
 
  • Like
Reactions: Stoiko Ivanov