• 1 Post
  • 793 Comments
Joined 3 years ago
cake
Cake day: June 17th, 2023

help-circle







  • I’ve installed Debian on a 16 year old iomega nas drive single board arm system. Special drive format, with blanking the first 32 bytes with zeros for a weird boot process. Installed OpenMediaVault on top of that.

    I don’t know how any of it works, I just search the web and cobble stuff together.








  • Yeah Tumbleweed supports a lot of things. Whenever people have complained about Linux not doing something, I’m like “Uh, OpenSUSE does”

    Since I’m updating the Kernel and nVidia driver modules, the system is making its own keypair, so I guess its not a check against a known supplied key but a machine specific key pair. Enrolling the key stores it to check against the kernel on boot.

    I suppose it protects against Random malware installs changing files, or if somebody swaps a drive on you.


  • Secure boot is in case the OS gets tainted. It only allows a signed OS to boot.

    For example when new nvidia drivers are autocompiled into my Tumbleweed kernel during an update, on reboot the srcureboot asks if I want to view the new key or allow it. I then have to enter a password to add the key…otherwise it won’t boot with that kernel.