Subnostr

Absolutely, you do you - But not correct to say Desktop Linux is horrible now, when the fact is, Linux allows you to take out what you don't want. If you're willing to go through the effort of cutting your lawn with scissors, but not uninstall some garbage packages to keep the machine you use to connect to the world clean and in a known state to yourself (or just put it together in 10 mins as arch allows), then I think that's a different issue entirely.

Layerjack (Onion Knight) 1y ago

Tell me how to get verified boot with desktop Linux.

Reply to this note

Please Login to reply.

Discussion

Low Information Voter 1y ago

Ubuntu has it, right?

Uxellodunum 1y ago

Some distros have this built-in. Others, and for instance with arch, you can use sbctl which automates most of the process, by having you create keys, enrolling them, and then signing the boot files (this is with the default arch bootloader, systemd-boot).

Layerjack (Onion Knight) 1y ago

This doesn't verify the firmware.

Uxellodunum 1y ago

Irrelevant - BIOS and UEFI for the purposes of secureboot only care about the kernel files and the bootloader. And in the case of UEFI, you can bypass bootloader and directly launch the kernel.

Layerjack (Onion Knight) 1y ago

Relevant to me.

SecureBoot is not verified boot. Verified boot is a lot more extensive. There is no way desktop Linux can do it. No matter how many commands you type.

Uxellodunum 1y ago

If you're worried about security, LUKS will do more than any verified boot can do.

Layerjack (Onion Knight) 1y ago

can't use LUKS for the bootloader or firmware