search

andreyv / sbupdate

Generate and sign kernel images for UEFI Secure Boot on Arch Linux
GNU General Public License v3.0
225 stars 20 forks source link

Is it possible to enable secureboot without erasing the existing OS? #33

Closed 1m-N00b closed 4 years ago

1m-N00b commented 4 years ago

i use arch os now.And I only have one desktop. I'm planning to buy a new laptop next year and would like to implement secureboot on it But I want to try secureboot with my existing OS because I'm buying a dell xps15-like laptop with higher and better specs and I don't want to mess with it and break it.If you can't implement it without wiping the existing OS, is there any way to do it, such as virtualization?

Maryse47 commented 4 years ago

Secureboot doesn't require wiping existing OS. You just need to sign files used to boot (which is what this tool does), nothing else changes.

1m-N00b commented 4 years ago

I see. So you can use it to create keys as you would in tuto, and you can implement secureboot by checking the box to enable secureboot in bios?Is that correct in my opinion?

Maryse47 commented 4 years ago

Yes, you can enable secureboot for existing system by following this project readme and enabling it in bios.

1m-N00b commented 4 years ago

thx