News for hackers. Stuff that matters.

A comment on Bottlerocket – Minimal, immutable Linux OS with verified boot.

Re:Bottlerocket – Minimal, immutable Linux OS with verified ... by katella on Saturday September 23, 2023 @05:13PM (#37627612)
Verified boot?
[ Parent | on HN ]
Re:Bottlerocket – Minimal, immutable Linux OS with verified ... by akyuu on Saturday September 23, 2023 @05:18PM (#37627645)
It means there is a full trusted boot chain from the TPM to loading the immutable root filesystem: https://github.com/bottlerocket-os/bottlerocket/blob/develop...

Regular Linux distributions don't have this, even if Secure Boot is enabled: https://0pointer.net/blog/brave-new-trusted-boot-world.html

[ Parent | on HN ]