Dear Maintainer,
The postinst script checks sysfs if Secure Boot is enabled.
The sysfs entry is changed
from: /sys/firmware/efi/vars/SecureBoot-<UUID>/data
to: /sys/firmware/efi/efivars/SecureBoot-<UUID>
Thus it doesn't correctly detect Secure Boot.
Checking method may be also incorrect.
("od -An -t u1 /sys/firmware/efi/efivars/SecureBoot-<UUID> | tr -d
'[[:space:]]'" command shows 60001 or 60000 on my PC)
I'm not sure if we can boot with rEFInd under Secure Boot environment after all
the above issues will be resolved.
It seems the upstream version 0.13.2 improves Secure Boot feature in its
refind-install script.
I suggest to upgrade to newer version on sid, and make some backports to
stable.