There are two bootloaders ("shim" and "preloader") that let you begin booting in UEFI-SecureBoot, but will transfer control over to a non-SecureBoot bootloader. Shim MOK allows you to boot basically anything.

Information from different distros:

Bootloaders:

Other Linux-based tools: