Enroll keys without clearing for Multi boot

[malachid]

I am currently using a Framework 16. I have multiple OS on different modules. They are all registered with Secure Boot.

I was going through the setup process for lanzaboote for Nix and sbctl says everything looks good.

The problem is that clearing all the existing ones is problematic. Is there any plan of allowing this to add to the existing keys (like mokutil or whatever)? Currently Nix is the only one not able to secure boot.

[Xarianne]

Would like Mokutil too. As soon as one of my other OSes re-updated the forbidden database, my Nix OS install started throwing a bad shim signature error and couldn't boot it again.

Also it seems to create several boot entries for me.

[RaitoBezarius]

You can keep the keys for shim if you want to be able to boot with shim.
As long as you keep the lanzaboote keys, this will work too.

[leguteape]

I have a multi-boot setup as well and I was able to activate secure boot for both of my NixOS installs simply by copying the entire /var/lib/sbctl directory from one install (where I setup the keys) to another. Not sure if this works for other linux distros though, so YMMV.