Fedora Silverblue secure boot custom keys

joojmachine, 9 months ago

Yeah, you can. I’ve been using this solution for a while now.

chevy9294, 9 months ago (edited 9 months ago)

Thank you! Thats what I was searching for :)

Edit: akmods requires a ton of dependencies which has to be layered and that defeats the purpose of silverblue… But still thanks

Presi300, 9 months ago

Just disable secure boot, it’s useless

sunbeam60, 9 months ago

I mean it arguably isn’t useless, but helps to wipe out a whole class of system attacks.

But yes, it’s very difficult to get Linux booting on it and it shouldn’t be and that sucks, because it IS actually quite useFUL.

throwawayish, 9 months ago

I’m not very well-versed into all of this, but if what you’re referring to is technically known as Unified Kernel Image, then you should know that unfortunately it’s currently not supported on systems that rely on ostree; thus unsupported on Silverblue. A lot of work has been gone into this over the last year, but I’m afraid we’re still (at least) two major releases removed from proper UKI support. For regular Fedora, consider referring to this excellent guide.

baseless_discourse, 9 months ago

likely no: github.com/fedora-silverblue/issue-tracker/…/272