this post was submitted on 21 Aug 2024
6 points (100.0% liked)
Ubuntu
81 readers
3 users here now
A community for news and discussion about the Ubuntu Linux distribution https://ubuntu.com/
founded 9 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Secure boot means only signed code can run in the kernel/ring 0. Grub, as the loader, needs to be signed as well. Basically anything with system privileges needs to be signed. If I remember right you need to enroll the signing key on installation, and the rest is handled automatically, but you can't use any custom kernel or kernel drivers.
Well this is balls...