> just build a UEFI Kernel Image and sign that.
examples and documentation welcome
https://wiki.archlinux.org/title/Unified_kernel_image#ukify_...
https://wiki.gentoo.org/wiki/Secure_Boot
https://wiki.archlinux.org/title/Unified_kernel_image#ukify_...