You must log in or register to comment.
I will just never bother with any of this Secure boot nonsense. I leave that bs to the windows users.
if only secureboot support hibernate
My secure boot with hibernate works perfectly fine, or rather it did work fine before hibernate started freezing my system, secure boot or not.
Did you maybe run out of swap space?
hibernate + amdgpu is unfortunately fucking cursed in my experience.
Oof, I tried alpine for a bit, nothing worked. That was just beyond me for little gain.
Nothing more secure than a computer that won’t start up.
I agree, bricks have been known to get rid of problems.
imo the only useful place to use secure boot is on a laptop with password protected bios and encrypted disk, in case someone wants to steal it they can’t recover your data or if they want to put a virus in your pc they literally can’t.
I don’t see any reason to put secure boot on a desktop PC that’s already locked inside your house.
You’re thinking bitlocker not secure boot
disk encryption is much better with secure boot, because disk encryption requires a unencrypted partition, since the boot has to start somewhere unencrypted, and secure boot secures the unencrypted partition
After looking into it, you are correct and I was mistaken. Thanks for correcting my misinformation.
Secured boot has nothing to do with encrypting your hard drive.
They never said it did. Only that a laptop with encrypted drives is where secure boot makes sense. The OS can be as secure as it wants but if the drive isnt encrypted it can be accessed.
Secure boot is in case the OS gets tainted. It only allows a signed OS to boot.
For example when new nvidia drivers are autocompiled into my Tumbleweed kernel during an update, on reboot the srcureboot asks if I want to view the new key or allow it. I then have to enter a password to add the key…otherwise it won’t boot with that kernel.
Woo, Tumbleweed! Their support of it is a pretty strong plus. I would get that screen sometimes too but it confused me a lot and I ended up just being like “Accept key I guess? Oh cool it boots.”
What are you supposed to compare the key to? Nvidia’s repo on a website using a different device, or before you update or what? Is it like comparing checksums in Dolphin?
I’m not particularly afraid of Evil Maids vs. my Tumbleweed desktop, as I’m much too poor for hired help (lol), so I just turned it off.
They make compelling points about using it for laptops though.
That’s exactly mz setup, as I need to leave my work laptop unauthorized in a shared space for prolonged periods.
Can’t set up secure boot though because even fckin lenovo doesn’t provide the needed bios options for Linux nowadays -.-
Which bios options do you need for that? Not enough to enter secure boot setup mode (restore factory keys) and enroll your keys?
I am using secure boot on a laptop with password-protected UEFI and disk encryption.
What’s the password?
hunter2
How do you know my cats name and favourite number
We actually don’t… We just see ******* only you can see it says hunter2
Do you not recognize me? I am your cat.
To play Valorant, why else
To play battlefield
sbctl is a nice tool for setting up secure boot:
https://github.com/Foxboron/sbctlThanks, but this is the very tool I used.
Deciding to turn on secureboot on any distro that doesn’t support it out of the box is always a mistake.
Still have nightmares from that one time i tried doing it under nixOS…
Everything about secure boot is a mistake.
I would disagree. The idea is great; eliminate preboot malware by trusting the whole boot stack. It has a place in computing and I would like to see it be something easier to work with.
Pretty much everything about how it’s currently implemented is a mistake, I’ll agree with.
More like who is implementing it. Take MS out of the picture and set it as an open standard.
It is open, oddly enough. It’s just that nobody ships anything other than Microsoft’s keys. You can add your own. It’s just that it is a tedious, manual process.
Microsoft has unofficial support for ext4 for their EFI partitions on their azure cloud, which in itself is a violation of their standard.
UEFI doesn’t forbid you from implementing additional file systems, it just requires everyone to support UEFI-FAT. iBoot for example supports booting from HFS volumes.
