Flock 2023

Secureboot is one of your earliest lines of defence against malware, unauthorized code execution during the boot process of the Operating System (at least in theory). It is advised to always have it enabled and most of modern PC's and servers come with secureboot enabled by default.


This presentation will be an overview of secureboot and the processes both technical and non-technical that Linux distribution has to go through to be secureboot enabled / ready. I will be talking about my understanding and experience with secureboot, how and why Rocky Linux and other Linux distribution are able to boot in secureboot environment, how to provide a chain of trust, what are the processes involved in getting distribution's shim signed by Microsoft, the technical and non-technical that Linux distributions faces during this process and the benefits to the end user of having Linux distribution supporting and running in secureboot environment.


We hope that this presentation will help the GNU/Linux community to understand how secureboot works and how Linux distributions are able to achieve secureboot.