Gilgwath on Nostr: nprofile1q…xvklh Well, tbf. the current state of secure boot in Linux can be kind ...

nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqlksxw7gqy3tyvzvzv4wn0he6045z7k68nhnlec9tz4njkk3xdfmqaxvklh (nprofile…vklh) Well, tbf. the current state of secure boot in Linux can be kind of pointless, yes. Often only a signed shim is loaded so it's not a true measured boot. In a real secure boot system, every step in the boot chain is signed and integrity checked. There are distros who do that, but boy are you having fun as soon as you need to load any out-of-tree modules like vmware, zfs, amdpro or nvidia drivers.