No Secure Boot support

[tulilirockz]

We don't have secure boot either on the ISO or the running system, would be nice to figure that out.

[tulilirockz]

Needs to be implemented in main

[tulilirockz]

Universal Blue implements this through a layer called kernel-cache. They seem to:

• generate openssl certificates for the private keys
• install them into /etc/pki/kernel/{public,private}
• sbsign the kernel image and kernel modules (and sbverify them too)
• then rebuild the kernel RPMs with the modifications they made.

We can make this into like a COPR RPM instead, but I feel like the container-based approach is better for this considering we can use GitHub secrets for the official ™️ secure boot secrets.

We also need to keep in mind this issue and how it will be implemented in ublue-os. ublue-os/main#691