题外话：下个月微软的secure boot certificate要过期

https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e 有的机器可能要升级firmware才能d得到新certificate