#lanzaboote — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #lanzaboote, aggregated by home.social.
-
I enabled #Lanzaboote. This was the scariest #NixOS thing I have done yet. https://github.com/juancnuno/nixos/commit/5177dbb1c753ca428aa6fcc3712e498cbe26a334
-
I enabled #Lanzaboote. This was the scariest #NixOS thing I have done yet. https://github.com/juancnuno/nixos/commit/5177dbb1c753ca428aa6fcc3712e498cbe26a334
-
I enabled #Lanzaboote. This was the scariest #NixOS thing I have done yet. https://github.com/juancnuno/nixos/commit/5177dbb1c753ca428aa6fcc3712e498cbe26a334
-
I enabled #Lanzaboote. This was the scariest #NixOS thing I have done yet. https://github.com/juancnuno/nixos/commit/5177dbb1c753ca428aa6fcc3712e498cbe26a334
-
I enabled #Lanzaboote. This was the scariest #NixOS thing I have done yet. https://github.com/juancnuno/nixos/commit/5177dbb1c753ca428aa6fcc3712e498cbe26a334
-
Tho... via Limine it doesn't seem to use UKI according to bootctl? How tf does it work then???
I imagine this is less safe than Lanzaboote then, since Lanzaboote makes measured UKIs, is it not possible to use UKI with Limine?
(terminal window is ssh to my NAS with lanzaboote, vscodium is my PC with Limine)
-
Tho... via Limine it doesn't seem to use UKI according to bootctl? How tf does it work then???
I imagine this is less safe than Lanzaboote then, since Lanzaboote makes measured UKIs, is it not possible to use UKI with Limine?
(terminal window is ssh to my NAS with lanzaboote, vscodium is my PC with Limine)
-
Tho... via Limine it doesn't seem to use UKI according to bootctl? How tf does it work then???
I imagine this is less safe than Lanzaboote then, since Lanzaboote makes measured UKIs, is it not possible to use UKI with Limine?
(terminal window is ssh to my NAS with lanzaboote, vscodium is my PC with Limine)
-
Tho... via Limine it doesn't seem to use UKI according to bootctl? How tf does it work then???
I imagine this is less safe than Lanzaboote then, since Lanzaboote makes measured UKIs, is it not possible to use UKI with Limine?
(terminal window is ssh to my NAS with lanzaboote, vscodium is my PC with Limine)
-
Tho... via Limine it doesn't seem to use UKI according to bootctl? How tf does it work then???
I imagine this is less safe than Lanzaboote then, since Lanzaboote makes measured UKIs, is it not possible to use UKI with Limine?
(terminal window is ssh to my NAS with lanzaboote, vscodium is my PC with Limine)
-
Just finished setting up #lanzaboote on my #nixos machine. Worked flawlessly. Nice to see how far we've come in easy secure boot support!
-
Just finished setting up #lanzaboote on my #nixos machine. Worked flawlessly. Nice to see how far we've come in easy secure boot support!
-
Just finished setting up #lanzaboote on my #nixos machine. Worked flawlessly. Nice to see how far we've come in easy secure boot support!
-
Just finished setting up #lanzaboote on my #nixos machine. Worked flawlessly. Nice to see how far we've come in easy secure boot support!
-
Just finished setting up #lanzaboote on my #nixos machine. Worked flawlessly. Nice to see how far we've come in easy secure boot support!
-
I'm considering putting #NixOS on my desktop as well, but for silly windows dualboot/nvidia driver related reasons I would prefer if I could have secure boot enabled. I saw that there's a community project available for enabling secure boot but i was wondering if anyone here had experience actually using #Lanzaboote before I begin the doubtless long and tedious process of getting everything to work
-
I'm considering putting #NixOS on my desktop as well, but for silly windows dualboot/nvidia driver related reasons I would prefer if I could have secure boot enabled. I saw that there's a community project available for enabling secure boot but i was wondering if anyone here had experience actually using #Lanzaboote before I begin the doubtless long and tedious process of getting everything to work
-
I'm considering putting #NixOS on my desktop as well, but for silly windows dualboot/nvidia driver related reasons I would prefer if I could have secure boot enabled. I saw that there's a community project available for enabling secure boot but i was wondering if anyone here had experience actually using #Lanzaboote before I begin the doubtless long and tedious process of getting everything to work
-
I'm considering putting #NixOS on my desktop as well, but for silly windows dualboot/nvidia driver related reasons I would prefer if I could have secure boot enabled. I saw that there's a community project available for enabling secure boot but i was wondering if anyone here had experience actually using #Lanzaboote before I begin the doubtless long and tedious process of getting everything to work
-
I'm considering putting #NixOS on my desktop as well, but for silly windows dualboot/nvidia driver related reasons I would prefer if I could have secure boot enabled. I saw that there's a community project available for enabling secure boot but i was wondering if anyone here had experience actually using #Lanzaboote before I begin the doubtless long and tedious process of getting everything to work
-
Today I set up Secure Boot on one of my #NixOS machines. After I found the reason for the beloved `error: infinite recursion encountered` issue (I forgot to add lanzaboote as an argument via specialArgs), it – just worked.
Then I continued to set up LUKS unlocking via a #TPM sealed key. Also really easy.
I'm amazed.
On one machine I would like to set up #SecureBoot. I use grub as it offers redundant bootloaders via the mirroredBoots options, which makes it incompatible with #Lanzaboote.
-
Today I set up Secure Boot on one of my #NixOS machines. After I found the reason for the beloved `error: infinite recursion encountered` issue (I forgot to add lanzaboote as an argument via specialArgs), it – just worked.
Then I continued to set up LUKS unlocking via a #TPM sealed key. Also really easy.
I'm amazed.
On one machine I would like to set up #SecureBoot. I use grub as it offers redundant bootloaders via the mirroredBoots options, which makes it incompatible with #Lanzaboote.
-
Today I set up Secure Boot on one of my #NixOS machines. After I found the reason for the beloved `error: infinite recursion encountered` issue (I forgot to add lanzaboote as an argument via specialArgs), it – just worked.
Then I continued to set up LUKS unlocking via a #TPM sealed key. Also really easy.
I'm amazed.
On one machine I would like to set up #SecureBoot. I use grub as it offers redundant bootloaders via the mirroredBoots options, which makes it incompatible with #Lanzaboote.
-
Today I set up Secure Boot on one of my #NixOS machines. After I found the reason for the beloved `error: infinite recursion encountered` issue (I forgot to add lanzaboote as an argument via specialArgs), it – just worked.
Then I continued to set up LUKS unlocking via a #TPM sealed key. Also really easy.
I'm amazed.
On one machine I would like to set up #SecureBoot. I use grub as it offers redundant bootloaders via the mirroredBoots options, which makes it incompatible with #Lanzaboote.
-
Today I set up Secure Boot on one of my #NixOS machines. After I found the reason for the beloved `error: infinite recursion encountered` issue (I forgot to add lanzaboote as an argument via specialArgs), it – just worked.
Then I continued to set up LUKS unlocking via a #TPM sealed key. Also really easy.
I'm amazed.
On one machine I would like to set up #SecureBoot. I use grub as it offers redundant bootloaders via the mirroredBoots options, which makes it incompatible with #Lanzaboote.
-
Today, I learned to be thankful for Rust in low-level contexts such as #UEFI as I am working on https://github.com/systemd/systemd/pull/28057 for #NixOS so we can support SecureBoot without #lanzaboote special tricks (i.e. not respecting upstream and creating fake "thin" UKIs).
I have been recompiling EDK2 too many times, thank myself for enabling a lot of debugging knobs in our EDK2 build in #nixos.
I have a nice development setup:
-
Today, I learned to be thankful for Rust in low-level contexts such as #UEFI as I am working on https://github.com/systemd/systemd/pull/28057 for #NixOS so we can support SecureBoot without #lanzaboote special tricks (i.e. not respecting upstream and creating fake "thin" UKIs).
I have been recompiling EDK2 too many times, thank myself for enabling a lot of debugging knobs in our EDK2 build in #nixos.
I have a nice development setup:
-
Today, I learned to be thankful for Rust in low-level contexts such as #UEFI as I am working on https://github.com/systemd/systemd/pull/28057 for #NixOS so we can support SecureBoot without #lanzaboote special tricks (i.e. not respecting upstream and creating fake "thin" UKIs).
I have been recompiling EDK2 too many times, thank myself for enabling a lot of debugging knobs in our EDK2 build in #nixos.
I have a nice development setup:
-
Today, I learned to be thankful for Rust in low-level contexts such as #UEFI as I am working on https://github.com/systemd/systemd/pull/28057 for #NixOS so we can support SecureBoot without #lanzaboote special tricks (i.e. not respecting upstream and creating fake "thin" UKIs).
I have been recompiling EDK2 too many times, thank myself for enabling a lot of debugging knobs in our EDK2 build in #nixos.
I have a nice development setup:
-
Today, I learned to be thankful for Rust in low-level contexts such as #UEFI as I am working on https://github.com/systemd/systemd/pull/28057 for #NixOS so we can support SecureBoot without #lanzaboote special tricks (i.e. not respecting upstream and creating fake "thin" UKIs).
I have been recompiling EDK2 too many times, thank myself for enabling a lot of debugging knobs in our EDK2 build in #nixos.
I have a nice development setup:
-
Exciting times. I finally got around to setting up Secure Boot with user enrolled keys on #NixOS using #lanzaboote and #sbctl. 🥳
-
Exciting times. I finally got around to setting up Secure Boot with user enrolled keys on #NixOS using #lanzaboote and #sbctl. 🥳
-
Exciting times. I finally got around to setting up Secure Boot with user enrolled keys on #NixOS using #lanzaboote and #sbctl. 🥳
-
Exciting times. I finally got around to setting up Secure Boot with user enrolled keys on #NixOS using #lanzaboote and #sbctl. 🥳
-
Exciting times. I finally got around to setting up Secure Boot with user enrolled keys on #NixOS using #lanzaboote and #sbctl. 🥳
