Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Does it apply to RedHat, Ubuntu, SUSE and the likes only? I wonder if as an Arch Linux user I can boot with Secure Boot enabled.


I can confirm that on both Lenovo and Dell, you can boot and install Fedora and Ubuntu without issue, but Manjaro (Arch) requires disable secure boot first, and on Dell you need to also disable AHCI (Raid) inside windows first (if you intend to keep your windows partition) or just disable in bios.

Otherwise it all works on latest XPS and X1 Extreme.


It applies to any distro willing to jump through the necessary hoops (which are some degree of effort, but they're not on fire)


Looks like you can't:

"Note: The official installation image does not support Secure Boot (FS#53864). To successfully boot the installation medium you will need to disable Secure Boot."

https://wiki.archlinux.org/title/Unified_Extensible_Firmware... https://bugs.archlinux.org/task/53864


If you're using Arch you're probably willing to set up SB with your own keys.

(Heck, I use my own keys on OpenSUSE even though my distro signs the kernel, because I want to use systemd-boot instead of mokutil since the latter is broken on my motherboard.)


There has been some movement to improve on this, but it's a bit of work getting a signing enclave setup so we can sign binaries.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: