This is a simple reference for pacman hooks that deal with kernel signing, bootloader signing and shim setup. Packages you'll need shim-signed a bootlaoder (grub or systemd-boot) sbsigntools