[…]The goal is to have you own certificate in the Secure Boot db variable[…]Requirements: Under Arch Linux, install the packages efitools and sbsigntool.[…]
https://github.com/sebmillet/custom-uefi
https://github.com/sebmillet/custom-uefi/blob/master/customsb.md