Re: anyone booting debian with secure boot enabled? And/or from GPT partitions?
On Wed, Jul 15, 2015 at 7:54 PM, Bret Busby <bret.busby@gmail.com> wrote:
> On 15/07/2015, Joel Rees <joel.rees@gmail.com> wrote:
>> Last I heard, debian was not participating in any of the initiatives
>> to get officially microsoft-signed signatures for kernels. I've been
>> out of the community for a few months, so I haven't kept up with this,
>> but quick searches don't reveal a change in policy.
>>
>> (And I am definitely not arguing for a change in policy, for anyone
>> who might misread me.)
>>
>> I have a netbook that allows secure boot to be disabled. As long as I
>> don't need to boot MSWindows, I just disable secure boot. (I don't
>> perceive any real advantage in Microsoft's implementation, anyway.)
>>
>> But I have some work coming up that requires dual-booting MSWindows,
>> and I also might want to use debian (rather than Ubuntu or Fedora) as
>> a host for developing for Android.
>>
>> (I am able to boot openbsd from an outboard USB3 drive and keep it
>> running long enough to build a snapshot release. That's roughly a day,
>> plus or minus a few hours. So I have one good option. But I'd really
>> prefer not to spend too much time running the OS itself from an
>> outboard device whose connection can slip or get noisy from oxidation
>> so easily.)
>>
>> So, I'd like to ask those who for whatever reason dual-boot debian
>> with MSWindows on a modern MSW8/10 compliant box, what do you do about
>> keys?
>>
>> And I'm also interested in war stories relative to (dual) booting from
>> GPT partitions.
>>
>
> I suggest that you search the archives regarding this - I believe that
> it has been extensively discussed, this year.
Well, I have read as recently as the May thread, "laptops, uefi,
secure boot and debian":
http://marc.info/?t=143236419200001&r=2&w=2
I was kind of hoping to hear from someone who has used the "shim" that
has been mentioned on occasion.
In other words, I have heard noises as if the linux foundation has
succeeded in setting up signed boot loader that passes control on to a
Linux kernel of choice, and I'm interested in what people who have
used it have to say. I don't see anything like that in the archives.
> On this computer, I have MSWin8 installed via UEFI, and Debian 6 and 7
> and Ubuntu 12.04 and 14.04 installed via Legacy BIOS. on a GPT system.
> Each has booted without significant problems, the Linux installations
> booting using GRUB.
Okay, so if you are saying, "No bumps relative to GPT and some version
of grub, that would be a datapoint of the type I'm looking for.
Thanks.
--
Joel Rees
Be careful when you look at conspiracy.
Arm yourself with knowledge of yourself, as well:
http://reiisi.blogspot.jp/2011/10/conspiracy-theories.html
Reply to: