Comment 26 for bug 1773457

I meant to add this in my preceding comment.

This is an example implementation of signed kernel and initramfs for Ubuntu: https://github.com/Phant0mas/ubuntu-secure-boot

Unsure if it works with 18.04, but this method could be implemented natively.