Question about Secure Boot with GRUB 2 and signed Linux images and initrds (ruderich.org)

submitted 1 year ago* (last edited 1 year ago) by recursive_recursion@programming.dev to c/linux@programming.dev

2 comments fedilink hide all child comments

I found this article/guide from 2016 by chance and I was wondering if anyone knew any cons for using GRUB

reason I'm asking for cons is cause I have a favorable bias towards GRUB so I thought it might be good to see what potholes might exist before going all in

you are viewing a single comment's thread
view the rest of the comments

[-] moonpiedumplings@programming.dev 2 points 1 year ago* (last edited 1 year ago)

The guide won't work. Grub attempts to verify everything in /boot, even if it is encrypted, which is pointless for a desktop use case.

https://moonpiedumplings.github.io/playground/arch-secureboot/

Original guide I followed: https://wejn.org/2021/09/fixing-grub-verification-requested-nobody-cares/

[-] recursive_recursion@programming.dev 1 points 1 year ago* (last edited 1 year ago)

mm I'll try to give ~~Moonpie's~~ your guide a go in a VM

Edit: oh lol/derp I somehow missed that moonpie is you😂, having a real brainfart it seems

reading ~~their~~ your guide I saw on the bottom

"Arch’s PKGBUILD, makepkg, and patch tools to patch the grub_efi_get_secureboot function of sb.c "

so I took a look at the repo and found: grub-install on EFI if forced #141 which was merged on Nov 13, 2023.

not sure if this is relevant but thought I'd share what I've found

anyways thanks for your comment and I also appreciate the helpful links

thank you!🤗

this post was submitted on 25 Jan 2024

10 points (91.7% liked)

Linux

7945 readers

565 users here now

A community for everything relating to the GNU/Linux operating system

Also check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev