For Incus and LXD VMs, secureboot config key must be set to false.
We can instead create symlinks to match the expected name. Inside /usr/share/edk/ovmf. If on an immutable system you will need to do this in a different location, symlink the full path, and change the {INCUS,LXD}_OVMF_PATH in {incus,lxd}.service file.
For Incus and LXD VMs, secureboot config key must be set to false.
We can instead create symlinks to match the expected name. Inside /usr/share/edk/ovmf. If on an immutable system you will need to do this in a different location, symlink the full path, and change the {INCUS,LXD}_OVMF_PATH in {incus,lxd}.service file.
This should be enough to no longer need the secuerboot config key.