Secureboot : Grub error "shim_lock protocol not found"

[longpanda]

OK, I see.

When secure boot is enabled in BIOS:
1、By default, Ventoy by pass the secure boot check before boot any ISO file. (using https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk)
2、When VTOY_LINUX_REMOUNT=1, Ventoy completly disable secure boot before boot any ISO file.

That's the difference.
That means systemrescue can boot OK only if we completly disable secure boot (in the BIOS or by Ventoy).