[arch-general] Secure Boot Support

Thomas Bächler thomas at archlinux.org
Tue Dec 4 04:27:46 EST 2012


Am 04.12.2012 02:51, schrieb kristof:
> Now that Matthew Garrett's shim is fully featured and publicly
> available, will Arch be implementing support for secure boot in the near
> future?

There is one showstopper to this: To my knowledge, not a single Arch
developer or trusted user has a machine to test this on.

That said, Matthew Garrett's solution seems easy enough to adopt for us.
I don't know how well it would work with other EFI bootloaders than
GRUB2. The fact that only x86_64 is support is not a problem: You should
use 64 Bit Arch on such a new machine, period. ARM support will
obviously be impossible, as Microsoft will not sign shim's key for ARM
devices.

If any Arch developer were to magically receive a new, secure-boot
secured computer, then we could quickly get shim support.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.archlinux.org/pipermail/arch-general/attachments/20121204/34ebb990/attachment.asc>


More information about the arch-general mailing list