Re: debian installation issue

From	Andrei POPESCU <andreimpopescu@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: debian installation issue
Date	2021-06-23 14:30 +0200
Message-ID	<Ctab0-6kd-3@gated-at.bofh.it> (permalink)
References	(3 earlier) <CoUHw-4ZQ-11@gated-at.bofh.it> <CpOgF-5GF-3@gated-at.bofh.it> <CpOgF-5GF-3@gated-at.bofh.it> <CsrGV-4JC-1@gated-at.bofh.it> <Ct5O1-3Ci-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Mi, 23 iun 21, 19:43:14, Richard Hector wrote:
> 
> Is that something that needs to be done by one company? Perhaps because of
> how SecureBoot is implemented?

For a logistic point of view, at least for x86, Microsoft appears to be 
the natural choice: many mainboard manufacturers, but most hardware will 
end up running Windows anyway[1].

> I'd prefer to be able to add Debian's key either in addition to or instead
> of Microsoft's, which could also be happily installed alongside those of
> Intel, AMD, your favourite government security agency or whoever. And Debian
> can get theirs signed by whichever of those they might think is appropriate.
> But I want to be able to reduce that list to just Debian's, or just the
> EFF's, or mine. Whatever combination I choose.

In my limited understanding and experience with Secure Boot it's mostly 
up to the mainboard manufacturer.

As far as I can tell for the ASRock board here it's possible to provide 
a machine owner key, possibly also to revoke all other keys. Even if it 
does work, I'm pretty sure 99% of home users don't actually care about 
any of this.

[1] Yes, I'm aware there are lots of x86 Chromebooks, but those are 
special purpose hardware, and even there it might make sense to include 
Microsoft's key, just in case someone wants to attempt installing 
Windows on the limited storage available :D

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

Thread

debian installation issue Semih Ozlem <semihozlemlinuxuser@gmail.com> - 2021-06-11 18:40 +0200
  Re: debian installation issue Richard Owlett <rowlett@cloud85.net> - 2021-06-11 19:20 +0200
    Re: debian installation issue Semih Ozlem <semihozlemlinuxuser@gmail.com> - 2021-06-11 20:40 +0200
      Re: debian installation issue Greg Wooledge <greg@wooledge.org> - 2021-06-11 21:10 +0200
        Re: debian installation issue Felix Miata <mrmazda@earthlink.net> - 2021-06-11 23:20 +0200
          Re: debian installation issue David Wright <deblis@lionunicorn.co.uk> - 2021-06-22 18:00 +0200
            Re: debian installation issue Felix Miata <mrmazda@earthlink.net> - 2021-06-24 06:30 +0200
              Re: debian installation issue David Wright <deblis@lionunicorn.co.uk> - 2021-06-29 18:20 +0200
                Re: debian installation issue Felix Miata <mrmazda@earthlink.net> - 2021-06-29 19:30 +0200
                Re: debian installation issue David Wright <deblis@lionunicorn.co.uk> - 2021-07-04 17:30 +0200
                Re: debian installation issue Felix Miata <mrmazda@earthlink.net> - 2021-07-05 05:40 +0200
        Re: debian installation issue Semih Ozlem <semihozlemlinuxuser@gmail.com> - 2021-06-12 00:00 +0200
          Re: debian installation issue Greg Wooledge <greg@wooledge.org> - 2021-06-12 00:10 +0200
        Re: debian installation issue Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-14 08:30 +0200
          Re: debian installation issue <tomas@tuxteam.de> - 2021-06-14 09:50 +0200
            [Off topic thoughts] Re: debian installation issue "Thomas Schmitt" <scdbackup@gmx.net> - 2021-06-14 10:50 +0200
              Re: [Off topic thoughts] Re: debian installation issue <tomas@tuxteam.de> - 2021-06-14 11:50 +0200
                Re: [Off topic thoughts] Re: debian installation issue Joe <joe@jretrading.com> - 2021-06-14 13:20 +0200
              Secure Boot in QEMU (was Re: debian installation issue) Kenneth Parker <sea7kenp@gmail.com> - 2021-06-14 12:10 +0200
                Re: Secure Boot in QEMU (was Re: debian installation issue) "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-14 13:40 +0200
            Re: debian installation issue Steve McIntyre <steve@einval.com> - 2021-06-21 15:00 +0200
              Re: debian installation issue tomas@tuxteam.de - 2021-06-21 16:40 +0200
              Re: debian installation issue Richard Hector <richard@walnut.gen.nz> - 2021-06-23 09:50 +0200
                Re: debian installation issue Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-23 14:30 +0200
      Re: debian installation issue Joe <joe@jretrading.com> - 2021-06-11 21:20 +0200
        Re: debian installation issue Felix Miata <mrmazda@earthlink.net> - 2021-06-12 00:30 +0200
          Re: debian installation issue Joe <joe@jretrading.com> - 2021-06-12 09:00 +0200
            Re: debian installation issue songbird <songbird@anthive.com> - 2021-06-12 13:50 +0200
              Re: debian installation issue "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-12 13:50 +0200
                Re: debian installation issue Joe <joe@jretrading.com> - 2021-06-12 14:20 +0200
                Re: debian installation issue songbird <songbird@anthive.com> - 2021-06-12 15:10 +0200
              Re: debian installation issue Joe <joe@jretrading.com> - 2021-06-12 14:10 +0200
            Re: debian installation issue Felix Miata <mrmazda@earthlink.net> - 2021-06-12 23:00 +0200
        Re: debian installation issue Steve McIntyre <steve@einval.com> - 2021-06-12 17:30 +0200

csiph-web