Dear Maintainer, In grub2, used peimage and chainloader modules. In Secure Boot Off state, cmdline is passed to linux by chainloader. However, in Secure Boot On state, cmdline is broken. See https://github.com/jclab-joseph/shim-cmdline-bug There are also reproducible scripts and captured images.