Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add guide to UEFI Secure Boot #139

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open

Conversation

some100
Copy link
Contributor

@some100 some100 commented Nov 23, 2024

adds a guide to uefi secure boot

includes using shim with opencore

@some100
Copy link
Contributor Author

some100 commented Nov 23, 2024

also #14 exist but its been a draft for over 4 years so idk

@perez987
Copy link
Contributor

perez987 commented Nov 23, 2024

@some100
You have done an excellent work. Very detailed. I have doubts about this to be managed by devs since is a topic outdated for a long time.
Let me post a few comments in case you see them useful. Feel free to do what you want with the texts of my repos.

There is an easier method to enroll efi images into the firmware, in my opinion not only it is much simpler but it also has much less risk of damaging the BIOS (with the classic method, sometimes you can get a bricked BIOS and have to recover it from a backup BIOS). You can read about it on my GitHub:
UEFI Secure Boot and OpenCore: The easy way (no Linux nor Windows needed)

In the part explaining how to insert secure variables into the firmware I miss modern BIOS images from American Megatrends International (AMI), which are present on many Gigabyte and Asus boards today. It's not a big deal but AMI Aptio V images are not the usual ones these days.
I have screenshots of these BIOS here:
UEFI Secure Boot and OpenCore: How to insert signatures in the UEFI firmware

Finally, the merging of OpenCore Vault with UEFI Secure Boot is poorly explained in Dortania's guide. Maybe it's useful to add a comment on how to do it. You can see my proposal here (I proposed this a while ago in the bug tracker but it has never been implemented):
Apple Secure Boot with OpenCore. Vaulting OpenCore. UEFI Secure Boot.
Go to the last block OpenCore Vault + UEFI Secure Boot.

Anyway, I appreciate the work you've done, completed with instructions for Linux working on shim as well.
I hope it will be taken into account.
Not to mention that developers are unpaid people who have other occupations and hobbies and probably find it difficult to find free time for everything.

@some100
Copy link
Contributor Author

some100 commented Nov 23, 2024

Included comments on Vaulting with Secure Boot. Thanks for the suggestion

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants