News for hackers. Stuff that matters.
Re:Linux and Secure Boot certificate expiration by ChocolateGod on Sunday July 20, 2025 @05:45AM (#44623428)
For UKI I imagine a big hurdle is the size of the images (given /boot/efi is usually only big enough for bootloaders, not kernels and initram) and custom kernel modules (e.g. Nvidia).

There was some systemd work on a spec for a boot partition to extend the efi partition for storing kernel images and initramfs, but I don't think any distro currently defaults to it on.

I think hibernation is currently also broken, since the hibernation file is stored unencrypted by default and thus can't be used with secure boot.

There are no comments on this comment yet.