edu4rdshl/edu4rdshl.github.io
1
0
Fork 0
mirror of https://github.com/edu4rdshl/edu4rdshl.github.io.git synced 2026-07-17 23:24:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

(post-update): UKI + Secure Boot with sbctl on ArchLinux: systemd-boot walkthrough

Browse source 
Add loader.conf
This commit is contained in:
Eduard Tolosa 2025-03-04 04:58:37 +00:00
parent 903832f192
commit c643bcf0e9
1 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
_posts/2025-03-04-uki-secure-boot-on-archlinux-systemd-boot-walkthrough.md
View file

@ -203,10 +203,18 @@ System:
Boot into FW: supported Boot into FW: supported
``` ```
## Especial considerations ## Special considerations
This setup should continue to work even if you update the BIOS, as long as you don't clear the keys/certs, but you never know what OEMs can do. If you have any issues, you can always clear the keys/certs and re-enroll the keys. This setup should continue to work even if you update the BIOS, as long as you don't clear the keys/certs, but you never know what OEMs can do. If you have any issues, you can always clear the keys/certs and re-enroll the keys.
You may also want to tweak `/boot/loader/loader.conf` a bit to disable editing, setting the resolution, etc. Here's an example:
```sh
timeout 3
console-mode max
editor false
```
# Conclusion # Conclusion
That's it! You have successfully set up UKI with Secure Boot on ArchLinux using systemd-boot. It may sound intimidating, but it's not that hard once you get the hang of it, and having a extra layer of security is always a good thing. That's it! You have successfully set up UKI with Secure Boot on ArchLinux using systemd-boot. It may sound intimidating, but it's not that hard once you get the hang of it, and having a extra layer of security is always a good thing.