cd /srv/openslx/www/boot/default
objcopy \
--add-section .osrel=/srv/osrel \
--change-section-vma .osrel=0x20000 \
--add-section .cmdline=/srv/cmd \
--change-section-vma .cmdline=0x30000 \
--add-section .linux=kernel.bak \
--change-section-vma .linux=0x40000 \
--add-section .initrd=initramfs-stage31 \
--change-section-vma .initrd=0x3000000 \
/usr/lib/systemd/boot/efi/linuxx64.efi.stub kernel.efi.bak
sbsign --key ~/sbkeys/DB.key --cert ~/sbkeys/DB.crt kernel.efi.bak --output kernel.efi