Public
Authored by Thomas Gaugler

Secure boot within win32-loader

The scripts are work in progress but might help you to understand how secure boot could be implemented within win32-loader.

bootcfg.nsh
bootcfg header file required for bootcreate.nsi and bootnext.nsi
bootcreate.nsi
Equivalent of sudo efibootmgr --create --label 'Debian GNU/Linux - Continue with install process' --loader '\EFI\debian\shimx64.efi'
bootnext.nsi
Equivalent of sudo efibootmgr --bootnext 0009

In addtion shimx64.efi.signed from the shim-signed package has to be renamed to shimx64.efi and reside in the same directory where you saved the downloaded files.

Please feel free to experiment with it. For example the EFI_LOADER define in bootcreate.nsi could be changed to a grub2 efi image.

Edited
130 Bytes
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment