Secure Boot

4 réponses [Dernière contribution]
galerio
Hors ligne
A rejoint: 02/07/2022

Wanting to try out Triskel 10, I wonder: will it have support for Secure Boot?

Avron

I am a translator!

Hors ligne
A rejoint: 08/18/2020

Sorry but I don't know.

I was wondering what Secure Boot exactly is, I found:
https://wiki.debian.org/SecureBoot
https://www.rodsbooks.com/efi-bootloaders/secureboot.html

Apparently, it is software on ROM or flash, run by the CPU or another processor, checking signatures of any executable to be started before the OS is running, so including the executable that starts the OS. The installed keys in a new computer are usually from Microsoft and perhaps some other companies. If the software allows it, the user can add keys.

For GNU/Linux, perhaps that could replace the checking of signature of every ISO from the same distribution. Not sure there is any other benefit.
Perhaps there are computers where Secure Boot is enforced whether the user likes it or not and even do not allow adding keys.

galerio
Hors ligne
A rejoint: 02/07/2022

I meant: does Trisquel 10 support Secure Boot today or do I have to disable it?

galerio
Hors ligne
A rejoint: 02/07/2022

I found that in the package list there is the Ubuntu "shim":
https://mirror.fsf.org/trisquel/pool/main/s/shim/

So - as far as I understand from googling - Trisquel should work even with Secure Boot enabled:
https://firmwaresecurity.com/2019/04/29/list-of-linux-distros-support-of-trustedsecuremeasuredboot-and-fwupd-needed/

UEFI will also work because there is "efibootmgr" (from Debian).

Am I wrong?

Ark74

I am a member!

I am a translator!

Hors ligne
A rejoint: 07/15/2009

Trisquel can work with UEFI, but that's not the same as saying it will support Secure boot.
Cheers.