root/archboot
1
0
Fork 0
mirror of https://gitlab.archlinux.org/tpowa/archboot.git synced 2024-09-20 12:00:37 +02:00
Code Issues Projects Releases Packages Wiki Activity

update wiki

Browse source
This commit is contained in:
Tobias Powalowski 2022-06-20 07:47:11 +02:00
parent cc967a3b4e
commit 4c4ecf9294
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
usr/share/archboot/wiki/wiki.md
View file

@ -142,8 +142,7 @@ $ ssh root@yourip
* It installs a bootloader which is **not** controlled by Arch Linux and **breaks** the concept of **Secure Boot** as is. * It installs a bootloader which is **not** controlled by Arch Linux and **breaks** the concept of **Secure Boot** as is.
* Please read [**Roderick Smith's guide**](https://www.rodsbooks.com/efi-bootloaders/secureboot.html#initial_shim) first for initial shim setup. * Please read [**Roderick Smith's guide**](https://www.rodsbooks.com/efi-bootloaders/secureboot.html#initial_shim) first for initial shim setup.
* In order to boot in [**Secure Boot**](https://wiki.archlinux.org/title/Secure_Boot "Secure Boot") mode on first boot: * In order to boot in [**Secure Boot**](https://wiki.archlinux.org/title/Secure_Boot "Secure Boot") mode on first boot:
* you need to add the hash of `/EFI/BOOT/grubx64.efi` to the MOK * you need to enroll archboot's MOK key from disk: ```/EFI/KEY/MOK.cer```
* you need to add the hash of `/EFI/BOOT/vmlinuz_x86_64` to the MOK
* Tools included for key management: KeyTool, HashTool, mokutil, sbsigntools, sbctl and [mkkeys.sh](http://mkkeys.sh) * Tools included for key management: KeyTool, HashTool, mokutil, sbsigntools, sbctl and [mkkeys.sh](http://mkkeys.sh)
* setup script supports the following [**Secure Boot**](https://wiki.archlinux.org/title/Secure_Boot "Secure Boot") layout: * setup script supports the following [**Secure Boot**](https://wiki.archlinux.org/title/Secure_Boot "Secure Boot") layout:
* shim from fedora is copied * shim from fedora is copied