Secure Boot in Arch Linux
Unified Kernel Image
Read Arch Wiki for details.
You can generate a UKI via mkinitcpio, first edit its linux.preset config file:
# mkinitcpio preset file for the 'linux' package
#ALL_config="/etc/mkinitcpio.conf"
ALL_kver="/boot/vmlinuz-linux"
ALL_microcode=(/boot/*-ucode.img)
PRESETS=('default' 'fallback')
#default_config="/etc/mkinitcpio.conf"
default_image="/boot/initramfs-linux …