[13:07] <Gray> Hello
[13:12] <Gray> May I ask why I can still launch kernel that build by myself when enabled secure boot?
[13:13] <Gray> I boot from shim,grub2 to kernel.
[13:14] <Gray> And I am sure I have enabled secure boot from BIOS menu.
[13:17] <Gray> I have checked the BIOS would block unsign shim.efi. And I also checked shim would block the unsign grub2.
[13:21] <alex_hoh> have you import your public key to DB or MOK?
[13:23] <Gray> I don't do that. 
[13:23] <Gray> So I should not entry to OS.
[13:24] <Gray> But I still entry to OS that build by myself.
[13:24] <Gray> What's the problem with that?
[13:26] <Gray> By the way, who is familiar with Chongqing city in China?