@sebastian-roth when George says this
mkdir -p /opt/fog/secureboot/hwkeys
cd /opt/fog/secureboot/
sudo efi-readvar -v PK -o /opt/fog/secureboot/hwkeys/hw_PK.esl
sudo efi-readvar -v KEK -o /opt/fog/secureboot/hwkeys/hw_KEK.esl
sudo efi-readvar -v db -o /opt/fog/secureboot/hwkeys/hw_db.esl
sudo efi-readvar -v dbx -o /opt/fog/secureboot/hwkeys/hw_dbx.esl
sudo chmod 666 /opt/fog/secureboot/hwkeys/*
He says he got the certs above on a debian instance running on a hardware pc,
What about if this a Ubuntu vm?