Let’s say I use gentoo linux. I changed files in /boot. Librem key is going to complain that /boot files are not signed. How am I supposed to sign files in /boot with librem key on any linux distro?

If the files in the boot partition have changed, then PureBoot will prompt you to sign each file within it again.

So, linux distribution doesn’t need to do anything? Does pureboot boot from unified kernel images used by UEFI and grub UEFI images?

Yes to the first question. As for the second question: [image] Ventoy: Muti-boot USB Drive on Librem 14? PureBoot/Heads are able to boot ELF, Multiboot kernels or Linux kernels (via kexec).

Does that mean if I want to use gnu guix, I have to write a new bootloader for gnu guix? Gnu guix currently supports grub-bootloader(for legacy bios), grub-efi-bootloader, grub-efi-removable-bootloader, grub-efi-netboot-bootloader, grub-efi-netboot-removable-bootloader, extlinux-bootloader and u-bo…

GNU Guix is currently not supported by PureBoot: [image] Can I run libre distros on Librem Mini (v1, v2)? PureBoot and Heads do not work with Guix currently ( Guixsd vs Heads - How to make it work together? · Issue #753 · linuxboot/heads · GitHub ). You can switch to coreboot/SeaBIOS if you want t…

If pureboot treats kernel and initrd as a bootloader, then in theory, I can write kernel-initrd bootloader for gnu guix. It will just copy kernel and initrd to /boot. How does pureboot distinguish multiple pairs of kernel and initrd?

If I flash coreboot/SeaBIOS, do I get any tamper detection?

No, but in exchange, the SeaBIOS payload was designed as a compatible open-source replacement for the x86 BIOS, so it will work with legacy operating systems.

On gentoo linux, you can just install kernel images with initrd and run grub-mkconfig -o /boot/grub/grub.cfg without running grub-install. On gentoo linux, most tasks are manually done, so gentoo linux is incredibly flexible. Gnu guix is different. It tries to configure the entire system through gu…

How can I utilize pureboot restricted boot on any linux distro?

Firmware PureBoot/Heads

FranklyFlawless October 21, 2024, 3:50am 8

@jonathon.hall

I do not know that answer, but you may be interested in a related topic with another user configuring Gentoo Linux with PureBoot on their Librem 14: