brent timothy saner on 22 Dec 2015 14:23:51 -0800


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Windows 10/UEFI/SecureBoot


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 12/22/2015 05:18 PM, Rich Freeman wrote:
(SNIP)
> However, I think there is another option. Didn't somebody get MS to
> sign a bootloader so that it would run with the default keys and be
> able to load linux images?  I believe it requires user interaction
> to allow a new image to boot, which is how they got around the
> trust issue.
> 
> -- Rich


yep.

1.)
https://docs.fedoraproject.org/en-US/Fedora/18/html/UEFI_Secure_Boot_Guide/sect-UEFI_Secure_Boot_Guide-Implementation_of_UEFI_Secure_Boot-Shim.html
2.) https://github.com/rhinstaller/shim
3.) https://mjg59.dreamwidth.org/20303.html
4,)
https://www.quora.com/How-can-I-sign-the-bootloader-hash-of-Arch-Linux-in-order-to-use-Secure-Boot-in-UEFI

the arch install ISO should offer a way to at least bootstrap this.
see also this:
https://wiki.archlinux.org/index.php/Unified_Extensible_Firmware_Interface#Secure_Boot
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=MOqN
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug