well, PureBoot primary function is to protect firmware + installed on disk linux.
if you wish to run kali as primary system, then problem is easy to solve: flash SeaBios, perform installation.
partition shema MBR ,1GB /boot formated with ext4. rest up to your preferences.
then utilize purism coreboot_util.sh to flash PureBOOT and perform signing of your /boot
same approach will work with other Linux Distros.
if you are seeking for temporary/occasional run kali, then much more handy approach is to use VM …
but that’s my opinion.
what i don’t get is how is possible that Pentester/Hacker don’t know linux basics. (eg.how to modify kernel?)
what i mean here is: installers , based on debian distro don’t load intel framebuffer, they mostly use Vesa driver , that utilize gfx payload from grub.
it’s being done for best compatibility.
challenge here is: it won’t work with kexec - which is actually one of core functionalities allowing heads/Pureboot to load different kernel and boot it.
PureBoot is nothing more than small linux fit into bios chip, that do crypto-verificcation of system then kernel from disk via kexec, and boot it.
linux boot differs slightly as most of hardware is already initialized. i915 card will not fallback to vesa, so debian installer that will not load i915 driver will simply boot with no screen.
there are 2 ways of fixing that, but booth require some tampering with installer image;
- replace kernel in installer image for kernel that actually have i915 driver compiled in.
- inject i915 module and it dependencies into initrd , and modify startup scripts to load i915 module.
booth approach require some skills that common linux user does not have.
so best thing i can advise is:
temporary reflash your device with standard seabios based bios (you can do this back and forth)
install preferred linux, then flash back Pureboot
for flashing bios there is automated tool:
that automates whole flashing process.
if you are planning juggling linux distros, then PureBoot is simply not for you, then simply leave lapbop bios on standard Coreboot/Seabios
note flashing bios not void warranty