[SOLVED] Fedora Shim (Secure Boot) and Grub on Gentoo

[dl200010]

I have been trying to get Secure Boot to work on Gentoo for the past week. I am unable to do anything with the keys in my EFI system. Razer locked away the key management. I have a case open with them to unlock it, but I am not holding my breath getting it done. They tried to tell me installing Linux will void their warranty. Even pointing be to their warranty, which said all software was not part of the warranty and that is it. I have a Razer Blade 15 2018 Advance. Intel 8th Gen i7 6-core. nVidia GTX 1070 Max-Q 8GB. 144 Hz 1080p screen. 16 GB DDR4 ram. Gentoo on SSD in external USB enclosure. It runs perfectly fine, with Secure Boot off. It boots just fine in EFI. I have the wifi working and all. I just have not installed any GUI yet. I wanted to get this Secure Boot fixed first. I cannot access the EFI certs in the EFI because I cannot clear the PK key to touch it. It is using a key that says it is for testing only ("DO NOT TRUST - AMI Test PK") as PK. (I would follow this, but don't want to risk bricking my laptop. This will just show you what I am missing. https://lukegb.com/posts/2016-11-11-secure-boot-shenanigans/) I saw that Fedora's Shim was in portage. I emerged it and copied it to /boot/EFI/BOOT/. I have the grub efi in there with it. I can boot from it just fine. I turn on Secure Boot and added my cert to it. Upon reboot it loads up Grub2. Grub2 tries to load the kernel and errors out. ("Bootloader has not verified loaded image. System is compromised. Halting.") I even tried removing the grub efi file and putting the kernel there under the same name. Boorts just fine with Secure Boot off, but not with it on. No documentation on how to use the Fedora Shim in portage that I can find. Anyone have any idea? I have been searching far and wide for a week. Hours a day.

[dl200010]

https://github.com/rhboot/shim/issues/172

This was fixed here. Turns to be I needed to patch Grub2.