Re: Secure_Boot

2023-07-17 Thread Simon Perry
On 2023-07-17 11:16 PM, solsTiCe d'Hiver wrote: And it would be best to backup those keys before deleting them. There is a command to do so on the same wiki page, a few paragraphs below. Also, I'm not sure how useful those backup keys are if your system is bricked. -- Simon Perry (aka Pezz

Re: Secure_Boot

2023-07-17 Thread Simon Perry
On 2023-07-17 11:16 PM, solsTiCe d'Hiver wrote: You should be careful before deleting all the secure boot keys from your BIOS. Reading the warning at https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Using_your_own_keys: Warning: Replacing the platform keys

Re: Secure_Boot

2023-07-17 Thread solsTiCe d'Hiver
You should be careful before deleting all the secure boot keys from your BIOS. Reading the warning at https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Using_your_own_keys : Warning: Replacing the platform keys with your own can end up bricking > hardware on some

Re: Secure_Boot

2023-07-17 Thread Simon Perry
On 2023-07-17 09:29 PM, Sergey Filatov wrote: So the boot sequence in my case is this: EFI -> shim -> MOK-signed GRUB2 with MOK-signed modules -> MOK-signed Linux kernel From what I've learned you don't need shim at all, you can boot a signed grub and kernel directly. Apparently you can ch

Re: Secure_Boot

2023-07-17 Thread Sergey Filatov
Hello. Oscar pointed out to something interesting that I also want to look at, but I'd like to answer your questions so you'll have a bit more understanding on how it works. On 17.07.2023 14:52, Source Code wrote: Hello! I wanted to ask: 1. The Arch Linux Wiki has a section 3.2 Using a signed

Re: Secure_Boot

2023-07-17 Thread Óscar García Amor
El lun, 17-07-2023 a las 16:52 +0600, Source Code escribió: > Hello! I wanted to ask: > [..] > P.S. If I make a mistake with any item, then everything will fly for > me and it will not be possible to recover? Hi! I advise you to take a look at this project: https://github.com/Foxboron/sbctl It m

Secure_Boot

2023-07-17 Thread Source Code
Hello! I wanted to ask: 1. The Arch Linux Wiki has a section 3.2 Using a signed boot loader. Can I skip the previous sections and skip subsection 3.2.1 PreLoader and go straight to section 3.2.2 Shim? 2. If I change the boot loader to grubx64.efi and then if I don't finish section 3.2.2, will every