3
Is secure boot actually bad ?
(sh.itjust.works)
Discussions and news about gaming on the GNU/Linux family of operating systems (including the Steam Deck). Potentially a $HOME
away from home for disgruntled /r/linux_gaming denizens of the redditarian demesne.
This page can be subscribed to via RSS.
Original /r/linux_gaming pengwing by uoou.
No memes/shitposts/low-effort posts, please.
WWW:
Discord:
IRC:
Matrix:
Telegram:
For Linux, the protection is weak.
But if properly implemented, it’s good. But it would be a hassle to do and would require users to register new keys and blacklist Microsoft’s.
Measured boot is a better solution for Linux. It’s decentralized and does not rely on Microsoft. It uses the TPM to “measure” various parts of the UEFI, bootloader, and OS to ensure they have not been tampered with.
Never heard of that
Does "every" modern BIOS support that?
Need to read up on it...
No, it requires a TPM2 chip. So the requirements for measured boot are to similar to Windows 11.
Poettering has a few blog posts and conference videos on it. And Aeon is a distro that implements measured boot as the default.
I use Aeon on my laptop, and I will say there are usability issues, but hopefully the kinks get worked out. Since installing in March, I've had to enter my recovery key and reenroll three times due to some kind of firmware update. This is on an older laptop (Ryzen 3500U), so I don't know if it's a common issue or unique to me.
Anyway, it's a cool idea, I hope it gets more attention. The benefits for regular users are fairly minimal, but I certainly appreciate security for security's sake.
Thanks!
That's good to know.
As I need my laptop for work, I can't really risk such experiments...
Yeah, mine is just for mucking around at home. I mostly browse the web and play casual games. Nothing important is stored there, so if I need to reinstall, then so be it.