Show HN: sbctl – Secure Boot key manager (github.com)

Wonderful tool! I started using it since 0.6 because sbsigntools and pesign both choked on some EFI executables I had, but sbctl's go-uefi parser did not. It also seems to handle enrolling PK/KEK/db/dbx a lot more reliably than sbkeysync (which used to ignore errors and exit(0)) and efivar.

Error free and really easy to use! Refer Arch wiki for help if you got stuck.

Thank you for this tool, @Foxboron! I'm using it for years now and it never failed me.