I assume that there already is something where exactly my problem was discussed years ago, but after spending too much time searching I try my luck here, I hope you can help me or atleast show me the right links to get my information from.Target: Debian with secure boot on USBSome Links I base my progress onrodsbooks efi-bootloaders installationrodsbooks efi-bootloaders secureboothttps://wiki.ubuntu.com/SecurityTeam/SecureBootSteps so far:# download debian8.4-netinstall (official link)wget http://cdimage.debian.org/debian-cd/8.4.0/amd64/iso-cd/debian-8.3.0-amd64-netinst.isomkdir debNet   # extract isobsdtar -C debNet -xf debian-8.4.0-amd64-netinst.isols debNet>autorun.inf  doc        install      pool                 README.txt>boot         efi        install.amd  README.html          setup.exe>css          firmware   isolinux     README.mirrors.html  tools>debian       g2ldr      md5sum.txt   README.mirrors.txt   win32-loader.ini>dists        g2ldr.mbr  pics         README.sourceAs described by rodsbooks,I should now rename EFI/BOOT/bootx64.efi to EFI/BOOT/grubx64.efimove shim.efi to EFI/BOOT/bootx64.efimove MokManager.efi to EFI/BOOT/make some nice magic with keys and signing, tadaa, you're done.To make an bootable USB, I take the following stepssources=debNetoutISO=debian8.4.0.modified.isorelative_isolinuxbin=isolinux/isolinux.binxorriso -as mkisofs \    -isohybrid-mbr /usr/lib/syslinux/isohdpfx.bin   \    -c boot.cat \    -b $relative_isolinuxbin \    -no-emul-boot -boot-load-size 4 -boot-info-table -eltorito-alt-boot \    -e boot/grub/efi.img -no-emul-boot -isohybrid-gpt-basdat \    -o $outISO $sourcessudo dd if=debian8.4.0.modified.iso of=/dev/sdbIf I had any idea what I was doing before (just getting uefi to run), I would have seen that I use efi.img. So it took some time experimenting with  debNet/efi/boot to find that adding or changing of even deleting this directory does not change booting at all. (maybe deleting the directory corrupts the installation - didnt try - but not the booting)So, I finally understood I have to change debNet/boot/grub/efi.img. So here's my main question so far - how do I create this efi.img for my needs?dd if=/dev/zero of=efi.img bs=1k count=3000mkfs.vfat efi.imgsudo mount efi.img img_mountpoint/and copying the bootloaders as described in rodsbooks does not seem to work.If have information for me would be quite nice.
building a uefi-secure boot debian-USB
debian;uefi;secure boot