I have been sorely missing some kind of UEFI SecureBoot HOWTO while figuring out the bits and pieces which are required to let our users avoid the pain of having to wrestle this by themselves; having found a lot of sparse articles I had to write one myself. It's published in the hope that at least those who choose to follow this way have a few bumps less and know better what lies ahead right from the start.
While at that, the described approach has resulted in a few groups of images made available that survive Secure Boot left enabled:
- Sisyphus-based regular weekly builds (primary, secondary download) with ALT Linux Rescue being quite popular;
- p7 starter kits including a couple of installers which aren't being built with "unstable" Sisyphus (think Debian testing in terms of stability);
- ALT Linux 7.0.2 beta/RC images arriving in their due time.