wiki/src/blueprint/UEFI_Secure_boot.mdwn

   1 Ticket: [[!tails_ticket 6560]]
   2
   3 [[!toc levels=2]]
   4
   5 Resources
   6 =========
   7
   8 * Debian's Secure Boot support will be done for GRUB first, unclear if
   9   other bootloaders will be supported
  10 * Matthew Garrett:
  11   - [Handling UEFI Secure Boot in smaller distributions](http://mjg59.dreamwidth.org/17542.html)
  12   - [Secure Boot bootloader for distributions available now](http://mjg59.dreamwidth.org/20303.html)
  13   - [An overview of Fedora's Secure Boot implementation](http://mjg59.dreamwidth.org/18945.html)
  14   - [Terse howto for getting a signed shim](http://mjg59.dreamwidth.org/20303.html?thread=783183#cmt783183)
  15 * [Ubuntu Privacy Remix](https://www.privacy-cd.org/)'s next release
  16   (UPR 12.04r1) will support UEFI; a beta is available; they copied
  17   the solution from Ubuntu 13.10 (beta): the shim bootloader and
  18   a corresponding GRUB binary which passes secure boot. See their
  19   [build script](https://www.privacy-cd.org/en/tutorials/build-your-own-cd/79).
  20 * [Managing EFI Boot Loaders for Linux by Rod Smith](http://www.rodsbooks.com/efi-bootloaders/index.html)
  21 * shim is not in Debian yet (2014-01-02)
  22 * [Booting a Self-signed Linux
  23   Kernel](http://www.kroah.com/log/blog/2013/09/02/booting-a-self-signed-linux-kernel/),
  24   by Greg Kroah-Hartman
  25 * Linux Foundation's
  26   [Making UEFI Secure Boot Work With Open Platforms](http://linuxfoundation.org/publications/making-uefi-secure-boot-work-with-open-platforms)
  27 * [ALT Linux' SecureBoot mini HOWTO](http://en.altlinux.org/UEFI_SecureBoot_mini-HOWTO) and
  28   [their](http://git.altlinux.org/people/mike/packages/?p=mkimage.git;a=blob;f=tools/mki-copy-efiboot;h=1ca6b0137c7488ae50540b027cf4a541074daba5;hb=HEAD)
  29   [scripts](http://git.altlinux.org/people/mike/packages/?p=mkimage.git;a=blob;f=tools/mki-pack-isoboot;h=85ca988c6aab94e3c44e64519baf2231e39d8d24;hb=HEAD)