Groups > linux.debian.maint.boot > #65201

Re: Install Guide vs. Secure Boot

From	Steve McIntyre <steve@einval.com>
Newsgroups	linux.debian.maint.boot, linux.debian.bugs.dist
Subject	Re: Install Guide vs. Secure Boot
Date	2021-01-30 17:20 +0100
Message-ID	<BD18B-5QH-7@gated-at.bofh.it> (permalink)
References	<BvUlA-3Kt-7@gated-at.bofh.it> <BvUlA-3Kt-5@gated-at.bofh.it> <BvV7X-4eY-1@gated-at.bofh.it> <BvWnn-4Zj-3@gated-at.bofh.it> <BCLdv-4ty-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Hi Lou!

On Fri, Jan 29, 2021 at 03:54:16PM -0700, Lou Poppler wrote:
>Hopefully this is already changed in the Bullseye install guide, but if not, I
>don't think I will learn how to make edits before Bullseye releases.
>
>The Buster install guide says in Section 3.6.3 
>https://www.debian.org/releases/stable/amd64/ch03s06.en.html#UEFI
>
>   Another UEFI-related topic is the so-called “secure boot”
>   mechanism.  Secure boot means a function of UEFI implementations that
>   allows the firmware to only load and execute code that is
>   cryptographically signed with certain keys and thereby blocking any
>   (potentially malicious) boot code that is unsigned or signed with
>   unknown keys.  In practice the only key accepted by default on most
>   UEFI systems with secure boot is a key from Microsoft used for signing
>   the Windows bootloader.  As the boot code used by debian-installer is not 
>   signed by Microsoft, booting the installer requires prior deactivation of
>   secure boot in case it is enabled.
>
>My test on a recent weekly-build testing netinst seems to show that the above is
>no longer correct -- it booted fine for me in UEFI/SecureBoot mode.  I thought I
>remembered reading (somewhere) that all recent debian installers (and live
>systems??) can boot in legacy BIOS mode or UEFI mode with or without secure
>boot.  

Ah, good catch. I'm checking on this now...

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
"Since phone messaging became popular, the young generation has lost the
 ability to read or write anything that is longer than one hundred and sixty
 characters."  -- Ignatios Souvatzis

Back to linux.debian.maint.boot | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Install Guide vs. Secure Boot Lou Poppler <LouPoppler@cableone.net> - 2021-01-30 00:20 +0100
  Re: Install Guide vs. Secure Boot Steve McIntyre <steve@einval.com> - 2021-01-30 17:20 +0100

csiph-web