Comment by mwpmaybe

It's... not great. It's a dual-boot laptop that I take out into the field so I'd like to encrypt the Windows and Linux volumes with BitLocker and LUKS respectively, and ideally I would leave Secure Boot enabled for that extra bit of security. Ultimately I'll need to decide whether to disable Secure Boot or patch the kernel to let me override lockdown mode. I know SuSE has implemented it but I don't know if their patch series will apply cleanly to a mainline Ubuntu kernel.