Same for all Linuxes, it’s a current limitation of the Linux kernel. There’s an open issue about it, essentially working out how to use the TPM to sign the memory dump so that secureboot will accept the signature and load it from disk.