can't setup on GRUB

[Sameguyy]

GRub 2:2.12.r292.g73d1c959-1

re-installed grub with tpm module
grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB --modules="normal test efi_gop efi_uga search echo linux all_video gfxmenu gfxterm_background gfxterm_menu gfxterm loadenv configfile tpm" --disable-shim-lock
via bios set the Secure Boot to setup mode
i prepared sbctl

sudo -i
sbctl status (made sure sbctl is not installed, Setup Mode is enabled, and Secure Boot is disabled)
sbctl create-keys
sbctl enroll-keys -m
sbctl verfiy

In addition to the files that need to be signed, I received a lot of errors in response related to the files inside grub
They are all the same, so I will insert one example

failed to verify file /boot/grub/x86_64-efi/tpm.mod: /boot/grub/x86_64-efi/tpm.mod: invalid pe header

i signed

[root@ArchLinux ~]# sbctl verify
Verifying file database and EFI images in /boot...
✓ /boot/EFI/BOOT/BOOTX64.EFI is signed
✓ /boot/EFI/grub/grubx64.efi is signed
✓ /boot/grub/x86_64-efi/core.efi is signed
✓ /boot/grub/x86_64-efi/grub.efi is signed
✓ /boot/vmlinuz-linux is signed
✓ /boot/EFI/GRUB/grubx64.efi is signed
✗ /boot/EFI/systemd/systemd-bootx64.efi is not signed

i boot in GRUB, grub looks broken visually, like some fonts didn't load, but it's readable
When I try to boot into the system GRUB gives an error
error: verification requested but nobody cares & need to boot kernel first
I hope the picture is acceptable to you

[Sameguyy]

This is what the BIOS menu "key managment" looks like

Here i enable setup mode, it vanish all keys that was been here Mb i need to do smth else here

[Sameguyy]

I tried what was advised to me here, but it didn't help,
https://bbs.archlinux.org/viewtopic.php?pid=2258224#p2258224

[Sameguyy]

Maybe someone can share a list of files that need to be signed and the version of grab, for whom it works
That would be great
Because I'm stuck

[Sameguyy]

https://www.reddit.com/r/archlinux/comments/sr6wz8/how_do_i_make_sbctl_boot_into_grub/
it give back error /etc/kernel/cmdline does not exist!

sudo sbctl bundle -s -a /boot/intel-ucode.img
-l /usr/share/systemd/bootctl/splash-arch.bmp
-k /boot/vmlinuz-linux
-f /boot/initramfs-linux.img
/boot/EFI/GRUB/grubx64.efi
/etc/kernel/cmdline does not exist!

[Sameguyy]

sudo grub-mkstandalone --disable-shim-lock --fonts=all -O x86_64-efi --modules="normal test efi_gop efi_uga search echo linux all_video gfxmenu gfxterm_background gfxterm_menu gfxterm loadenv configfile tpm" -o /boot/EFI/grub/grubx64.efi "/boot/grub/grub.cfg" -v

I tried this command, but the grub still does not want to load the system with the same errors mentioned at the begining,
but now it is enough to sign only /boot/EFI/GRUB/grubx64.efi in order to boot into the grub during secure boot
But w\o Secure Boot this standalone grub is boot normaly

[Sameguyy]

well I think either some modules are missing, or the grab version is broken in terms of what I want to do
Or for some reason my UEFI does not want to work with GRUB, although it loads it, so why it does not work forward is not clear

[Foxboron]

This is not an issue with sbctl. So moved as a "discussion" instead.

[Sameguyy]

I gave up, grub f::%ed me
with systemd-boot it works fine, but now I don't have a cute anime girl on the whole screen in the bootloader, sad sad

[YisuiDenghua]

the problem is same to me