KERNEL_VERSION=$(uname -r)
KERNEL_CMDLINE=$(cat /proc/cmdline | awk '{ $1=""; print $0 }')
sudo cat > /boot/efi/grub.cfg << EOF
set timeout_style=menu
set timeout=2
* Copy your existent kernel and initrd to the EFI partition
sudo cp /boot/vmlinuz-$KERNEL_VERSION /boot/efi/ sudo cp /boot/initrd.img-$KERNEL_VERSION /boot/efi/
* Sign grub.cfg, kernel and initrd with your GPG key