this post was submitted on 03 Sep 2023
45 points (97.9% liked)

Linux

47755 readers
853 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

Hi, I just switched from arch to fedora silverblue. I have secure boot enabled with factory keys (microsoft). How can I sign bootloader and kernel and other stuff with my own keys using something like sbctl? Is this even possible using Fedora Silverblue?

Thank you :)

top 7 comments
sorted by: hot top controversial new old
[–] [email protected] 5 points 1 year ago (1 children)

I'm not very well-versed into all of this, but if what you're referring to is technically known as Unified Kernel Image, then you should know that unfortunately it's currently not supported on systems that rely on ostree; thus unsupported on Silverblue. A lot of work has been gone into this over the last year, but I'm afraid we're still (at least) two major releases removed from proper UKI support. For regular Fedora, consider referring to this excellent guide.

[–] [email protected] 2 points 1 year ago* (last edited 10 months ago)

[This comment has been deleted by an automated system]

[–] [email protected] 2 points 1 year ago
[–] [email protected] 2 points 1 year ago (1 children)

Yeah, you can. I've been using this solution for a while now.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Thank you! Thats what I was searching for :)

Edit: akmods requires a ton of dependencies which has to be layered and that defeats the purpose of silverblue... But still thanks

[–] [email protected] -4 points 1 year ago (1 children)

Just disable secure boot, it's useless

[–] [email protected] 4 points 1 year ago

I mean it arguably isn’t useless, but helps to wipe out a whole class of system attacks.

But yes, it’s very difficult to get Linux booting on it and it shouldn’t be and that sucks, because it IS actually quite useFUL.