Yes, there could be integration with OEM mode so that MOK generation and enrollment happens as part of the user first-boot experience. Canonical is unlikely to invest in the work to make this happen in oem-config/ubiquity as it's not a requirement from any of our commercial OEM partners, but community code contributions should be fine here.
Yes, there could be integration with OEM mode so that MOK generation and enrollment happens as part of the user first-boot experience. Canonical is unlikely to invest in the work to make this happen in oem-config/ubiquity as it's not a requirement from any of our commercial OEM partners, but community code contributions should be fine here.