Linux

5090 readers

188 users here now

A community for everything relating to the linux operating system

Also check out !linux_memes@programming.dev

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 1 year ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Question about Secure Boot with GRUB 2 and signed Linux images and initrds (ruderich.org)

submitted 8 months ago* (last edited 8 months ago) by recursive_recursion@programming.dev to c/linux@programming.dev

2 comments fedilink hide all child comments

I found this article/guide from 2016 by chance and I was wondering if anyone knew any cons for using GRUB

reason I'm asking for cons is cause I have a favorable bias towards GRUB so I thought it might be good to see what potholes might exist before going all in

top 2 comments

sorted by: hot top controversial new old

[–] moonpiedumplings@programming.dev 2 points 8 months ago* (last edited 8 months ago) (1 children)

The guide won't work. Grub attempts to verify everything in /boot, even if it is encrypted, which is pointless for a desktop use case.

https://moonpiedumplings.github.io/playground/arch-secureboot/

Original guide I followed: https://wejn.org/2021/09/fixing-grub-verification-requested-nobody-cares/

[–] recursive_recursion@programming.dev 1 points 8 months ago* (last edited 8 months ago)

mm I'll try to give ~~Moonpie's~~ your guide a go in a VM

Edit: oh lol/derp I somehow missed that moonpie is you😂, having a real brainfart it seems

reading ~~their~~ your guide I saw on the bottom

"Arch’s PKGBUILD, makepkg, and patch tools to patch the grub_efi_get_secureboot function of sb.c "

so I took a look at the repo and found: grub-install on EFI if forced #141 which was merged on Nov 13, 2023.

not sure if this is relevant but thought I'd share what I've found

anyways thanks for your comment and I also appreciate the helpful links

thank you!🤗