It's... not great. It's a dual-boot laptop that I take out into the field so I'd like to encrypt the Windows and Linux volumes with BitLocker and LUKS respectively, and ideally I would leave Secure Boot enabled for that extra bit of security. Ultimately I'll need to decide whether to disable Secure Boot or patch the kernel to let me override lockdown mode. I know SuSE has implemented it but I don't know if their patch series will apply cleanly to a mainline Ubuntu kernel.

It's a Linux thing.

> The Linux kernel disables the possibility of hibernation when Secure Boot is in use because it cannot guarantee that the swap file is unchanged. "Unencrypted hibernation/suspend to swap are disallowed as the kernel image is saved to a medium that can then be accessed."

https://wiki.debian.org/Hibernation

I think it's specific to their machine? I've got an old Skylake (6600u) machine with Secure Boot disabled that will last a weekend with the lid closed.