Fedora Silverblue secure boot custom keys (monero.town)

submitted 1 year ago by chevy9294@monero.town to c/linux@lemmy.ml

7 comments fedilink hide all child comments

Hi, I just switched from arch to fedora silverblue. I have secure boot enabled with factory keys (microsoft). How can I sign bootloader and kernel and other stuff with my own keys using something like sbctl? Is this even possible using Fedora Silverblue?

Thank you :)

top 7 comments

sorted by: hot top controversial new old

[-] throwawayish@lemmy.ml 5 points 1 year ago

I'm not very well-versed into all of this, but if what you're referring to is technically known as Unified Kernel Image, then you should know that unfortunately it's currently not supported on systems that rely on ostree; thus unsupported on Silverblue. A lot of work has been gone into this over the last year, but I'm afraid we're still (at least) two major releases removed from proper UKI support. For regular Fedora, consider referring to this excellent guide.

[-] skullgiver@popplesburger.hilciferous.nl 2 points 1 year ago* (last edited 1 year ago)

[This comment has been deleted by an automated system]

[-] baseless_discourse@mander.xyz 2 points 1 year ago

likely no: https://github.com/fedora-silverblue/issue-tracker/issues/272

[-] joojmachine@lemmy.ml 2 points 1 year ago

Yeah, you can. I've been using this solution for a while now.

[-] chevy9294@monero.town 1 points 1 year ago* (last edited 1 year ago)

Thank you! Thats what I was searching for :)

Edit: akmods requires a ton of dependencies which has to be layered and that defeats the purpose of silverblue... But still thanks

[-] Presi300@lemmy.world -4 points 1 year ago

Just disable secure boot, it's useless

[-] sunbeam60@lemmy.one 4 points 1 year ago

I mean it arguably isn’t useless, but helps to wipe out a whole class of system attacks.

But yes, it’s very difficult to get Linux booting on it and it shouldn’t be and that sucks, because it IS actually quite useFUL.

this post was submitted on 03 Sep 2023

45 points (97.9% liked)

Linux

48335 readers

476 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago

MODERATORS

AgreeableLandscape@lemmy.ml

nooter692@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz