something i came across looking into distributions to replace debian is the stance that qubes takes on secure boot: "UEFI Secure Boot is not supported out of the box as UEFI support in Xen is very basic. Arguably secure boot reliance on UEFI integrity is not the best design. [...] See the [Heads project] for a better-designed non-UEFI-based secure boot scheme with very good support for Qubes." https://doc.qubes-os.org/en/latest/introduction/faq.html#is-secure-boot-supported alas, i don't think my framework amd laptop (their first-gen amd) supports open firmware... #debian #secureboot #qubes