Hey guys,
I've just set up Arch on my Surface Pro 9 and it's already working pretty good. But I am wondering, how you handle the situation with "Secure Boot". Do you keep it disabled or do you set it up? If so, how do you do it?
I read https://github.com/linux-surface/linux-surface/wiki/Installation-and-Setup#Arch but I'm a little confused, how this should be done.
~sp3ctre
3 Comments
CameronDev@programming.dev · 3 pts · 46d
I haven't tried recently, but secureboot on arch just seems a complete pain in the ass. I wouldn't bother, if the private keys to sign binaries is on your PC, then anyone who gets on your PC can sign anything they like, so secureboot doesn't buy you much.
sp3ctre@feddit.org · 3 pts · 46d
The main reason for me to use Secure Boot would actually be, that the ugly red "unlocked"-symbol at boot would disappear.
Extra security is nice, but only if there's a stable (& easy) solution available.
CameronDev@programming.dev · 2 pts · 46d
Can I suggest closing your eyes during boot? :D
https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#PreLoader
This doesn't seem to difficult, worth a try?