I thought I’d stop back in and provide a couple of links to posts with same issue … one post is fairly recent, and the other is pretty old … these are responses showing the issues and best to not use BLS
Recent:
GRUB2-BLS does not work with dual booting so that is not an option in your case.
For a 15.6 system using GRUB2-EFI I would keep the -EFI bootloader for the upgraded system. If you really don’t like it you can change that later, but it isn’t a trivial procedure (see for instance systemd-boot installation ).
Choosing GRUB2-EFI is “safe”; I cannot tell whether or not there will be “problems later” since I never upgraded Leap 15.6 to Slowroll but upgrade of 15.6 to Tumbleweed is a routine openQA t…
.
And back to Aug 2025:
Yes, grubbls (or, more precisely, GRUB2 blscfg/bls_import commands) ignore any BLS entry without linux key. And (open)SUSE grubbls is built to only parse BLS entries, it ignores “normal” grub.cfg.
Pragmatic solution is to use systemd-boot which offers more functionality. In particular, it will (try to) auto-detect Windows EFI bootloader and add it to the menu. TBH I still do not understand the purpose of grubbls when systemd-boot already exists.
There is no abstract security. You need to sta…
2 Likes