diff --git a/sdk_container/src/third_party/portage-stable/sys-firmware/ipxe/ipxe-1.21.1_p20230601.ebuild b/sdk_container/src/third_party/portage-stable/sys-firmware/ipxe/ipxe-1.21.1_p20230601.ebuild
index 8123927dca..8f24b1ebc7 100644
--- a/sdk_container/src/third_party/portage-stable/sys-firmware/ipxe/ipxe-1.21.1_p20230601.ebuild
+++ b/sdk_container/src/third_party/portage-stable/sys-firmware/ipxe/ipxe-1.21.1_p20230601.ebuild
@@ -3,7 +3,7 @@
 
 EAPI=8
 
-inherit savedconfig toolchain-funcs
+inherit savedconfig secureboot toolchain-funcs
 
 # for 1.21.1_p20230601
 COMMIT_SHA1="4fa4052c7ebb59e4d4aa396f1563c89118623ec7"
@@ -34,6 +34,12 @@ BDEPEND="
 		x86? ( ${SOURCE_DEPEND} )
 	)"
 
+pkg_setup() {
+	if use efi || use efi64; then
+		secureboot_pkg_setup
+	fi
+}
+
 src_configure() {
 	use binary && return
 
@@ -123,5 +129,9 @@ src_install() {
 	use usb && doins bin/*.usb
 	use lkrn && doins bin/*.lkrn
 
+	if use efi || use efi64; then
+		secureboot_auto_sign --in-place
+	fi
+
 	save_config config/local/general.h
 }