Explore >> Select a destination


You are here

www.linux.it
| | blog.jak-linux.org
5.6 parsecs away

Travel
| | Today, I wrote sicherboot, a tool to integrate systemd-boot into a Linux distribution in an entirely new way: With secure boot support. To be precise: The use case here is to only run trusted code which then unmounts an otherwise fully encrypted disk, as in my setup: If you want, sicherboot automatically creates db, KEK, and PK keys, and puts the public keys on your EFI System Partition (ESP) together with the KeyTool tool, so you can enroll the keys in UEFI. You can of course also use other keys, you just need to drop a db.crt and a db.key file into /etc/sicherboot/keys. It would be nice if sicherboot could enroll the keys directly in Linux, but there seems to be a bug in efitools preventing that at the moment. For some background: The Platform Key (PK) sig...
| | willhaley.com
2.8 parsecs away

Travel
| | Warning: I have stopped updating this article in favor of a similar, but updated, guide. These are steps that I used on an Ubuntu 18.04 LTS (Bionic Beaver) 64-bit system to build an x86 Debian 9 (Stretch) live environment that I can boot from CD or USB. These steps can be used to create a live environment that is BIOS bootable (MBR), UEFI bootable (GPT), or combination of both UEFI and BIOS bootable. Something unique about this guide is that Syslinux/Isolinux are not used. Only Grub boot equipment. This is done for consistency and to avoid mixing the two (Syslinux/Isolinux alone cannot accomplish everything covered in this article, but Grub can).
| | danigm.net
3.3 parsecs away

Travel
| |
| | dracos.co.uk
13.4 parsecs away

Travel
| My trusty 2011 Macbook Air had started to show its age - a couple of missing keys, the fan being on pretty much all the time - so I looked for a replacement. After some tedious investigation, I settled upon a Dell XPS 9370 from their Outlet store. Windows 10 can run Linux now, so it seemed like an interesting thing to spend some time with, and if it all went sour I could always fully install Linux instead.