[riolu]

It's very easy to enable secure boot with Nvidia now, at least on fedora with kmods.

https://rpmfusion.org/Howto/Secure%20Boot?highlight=%28%5CbC...

I have personally set up secure boot with Nvidia on RHEL 8 and Fedora 36, it survives driver updates as well. Fedora also makes it simple to use a TPM for drive decryption.

[bravetraveler]

Very easy for you and me, I agree - it has certainly improved from where it was even just a year ago.

I'm more commenting on the average Joe who has landed on Linux but is averse to the terminal or really anything that's not push-button/OOTB

These are the types that'll see it, maybe manage to fix it, then later be flabbergasted when they can't boot (with SB enabled) because the import was lost

I'm not sure there's a good answer, other than just trying to press the ball forward -- enduring whatever turmoil may follow

Maybe this prompt will lead to better mok utilies for self service, instead of tailored (and often fragile) releases. I personally have stopped bothering