how can I boot from an installed linux with secure boot enabled?

Question

I know that it's possible to full install a linux distro on an external drive or a USB flash drive. But with Windows 11 and secure boot, things start to get more difficult: I'd like to have a full install USB because I need persistence, encrypted drive and a password for admin privileges, but I need also to boot from this USB drive from different PCs, notebooks and desktops, with both legacy and UEFI BIOS. Before Windows 11, I could do it with almost no problems, but now I need to boot into Windows 11 (with secure boot enabled) and from the linux USB drive, and it's unthinkable that every time, I have to access the bios and enable/disable the secure boot to switch OS. Is there anything I can do?

Answer 1

Use a supported Linux distribution (such as Ubuntu or Fedora), or [this has to be done to each computer with which you want to use your linux drive], sign the bootloader and load the key(s) into UEFI (instructions: https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Microsoft_Windows ). The latter option is a pain so I'd recommend just using a signed distro.