Morten LinderudNew release of #sbctl
Contains support for yubikey as a key backend, and fixes an annoying bug where `sbctl verify` would choke on non-PE executables.
~~I mean...
I did add the switches #sbctl `--yolo` and `--yes-this-might-brick-my-machine` for `enroll-keys` as dealing with the errors is a bit annoying when you know what you are doing.
But downstreams using these flags without even considering giving people a warning is... not great?
Looking at you #NixOS
EDIT: It was some test integration code 🫠
Aku KotkavuoToday it finally happened: Battlefield 6 Beta requires Secure Boot enabled on Windows, so I had to finally enable it while dualbooting.
I'm so happy that I found the excellent https://github.com/Foxboron/sbctl created by @Foxboron. The whole process was *much* less painful than I thought it would be thanks to this tool. Thank you Morten!
Basic pleasure of looking up mentions of #sbctl in any secure boot articles with a comment section.
I think i did something right there.
Huh, missed the 5 year anniversary of #sbctl.
Originally started on the 3rd of May in 2020. Mainly a COVID project and seems like people have benefitted from it.
Should probably try get a 1.0 release out the door though 🫠
Originally started on the 3rd of May in 2020. Mainly a COVID project and seems like people have benefitted from it.
Should probably try get a 1.0 release out the door though 🫠
sbctl got a new release to ensure we bundle the new and updated 2023 certificates from Microsoft.
Currently shopping for ideas and opinions on how `sbctl` should approach the revocation list in Secure Boot (`dbx`).
https://github.com/Foxboron/sbctl/issues/23
Feel free to come with ideas but trying to keep things simple is the goal here.
Dmitriy from @siderolabs did a couple of optimization changes to my `go-uefi` library.
Results in a reduction of their memory usage from 1.6 GiB to 80 MiB(!)
https://github.com/Foxboron/go-uefi/pull/23
Next release of #sbctl have to be more buggy. Sorry to disappoint.
https://github.com/Foxboron/sbctl/issues/415
I don't make the rules.
Adrien DorsazNouvel article sur mon blog où je présente comment j'ai fait une installation personnalisée de Debian avec disque chiffré par LUKS v2, volumes Btrfs, systemd-boot et Secure Boot.
https://adorsaz.ch/articles/installation-personnalis%C3%A9e-de-debian.html
#debian #sbctl #secureboot #btrfs #debootstrap #luks
---
PS: Les réponses à ce message apparaîtront comme commentaire sous l'article.