[GOT WORSE] TRYINA ENABLE SECURE BOOT ON Arch Linux

[tiny needle]

ok update: I think i exacerbated this

[analog oasis]

Okay lets break this down and make the problem a little more clear; what exactly do you need help with right now? @tiny needle

Since you mentioned multiple problems that don’t really have all that much to do with each other

[tiny needle]

basically I was following yt tutorial on how to enabling secure boot, because Windows requires it to boot while arch can't run with secure boot on, and i have the two oss on my grub bootloader,
Windows also differs from Arch on another BIOS setup concerning disk setup that has two options: "AHCI/Intel platform technology", but I guess that's a problem for another thread,

so on tryina enable secure boot
his setup was different than mine on kernel, I signed /boot/vmlinuz-linux while he signed /efi/EFI/Linux/arch-linux.efi
but that's irrelevant, so I'm just gonna tell you what I did,

what happened is
I reset secure boot to standard and disabled it, ran arch and instaleld sbctl and signed the files you see here,

Im concerned if I reboot my system now will it crash? will the grub bootloader run? will windows refuse to run if I chose it?

[analog oasis]

1. Windows doesn’t require secure boot unless you play games utilizing ring 0 anticheats (like valorant for example).
2. Arch can run with secure boot, you just need to sign the binaries yourself. There is tools to sign your installation media with, its like 3 clicks.

Resetting/deleting your keys will disable secureboot/put it into a special mode that lets you replace the keys with sbctl.
As far as I understand you already done that part. You need to sign every binary that has to do with booting: anything grub, vmlinuz-linux, etc. you will need to sign the grubx64.efi aswell.

When changing your drive modes, you need to do the necessary changes to also load the correct drivers upon startup. I believe linux does this by default, windows definitely doesn’t. There’s tutorials out there though.

[tiny needle]

yea i do have the epic games vanguard on startup but, why would that in any sense cause windows to fail to boot? because when I do try to run windows with secure boot disabled it refuses and crashes and keeps rebooting,
it's just idk why when if run sbctl verify it tells me those original (unsecure, that don't have .signed in the end, except for /boot/bmlinuz-linux) are not signed, which makes sense but the tutorial video didn't show them

well I just don't know how windows is gonna deal with the fact that I reset secure keys, i hope it automatically figures it out on its own

also can you link me something on drive modes?

[alpine sparrow]

right now i'm not using secure boot and windows 11 works fine

[tiny needle]

yea my issue is the other way around surprisingly; arch linux won't boot with secure boot, windows dictates secure boot for it to run,

but I'll reboot my system now for the first time after tryina enable secure boot on arch,

and then hopefully I'll be unto the next problem whcih is: Enable Arch on Intel Technology and not just AHCI

aight update:
neither Linux Bootloader nor GRUB are booting, they reverse to me BIOS settings, I set the BIOS settings suitable for Windows, windows runs, but I've lost all contact with my arch linux distro

luckily I have another old linux distro (ubuntu) on another disk, what's there to do guys..

[GOT WORSE] TRYINA ENABLE SECURE BOOT ON Arch Linux

[tiny needle]

any help guys