Advanced

Implementing UEFI Secure Boot in Fedora

Posted by kennethh on · 15 comments
mjg59; By Matthew Garrett
Mail this story
Print this story

It's not really an option to force all our users to play with hard to find firmware settings before they can run Fedora. We've been working on a plan for dealing with this. It's not ideal, but of all the approaches we've examined we feel that this one offers the best balance between letting users install Fedora while still permitting user freedom.

Full Story

  Nav
» Read more about: Story Type: Announcements; Groups: Fedora, Microsoft

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (15)

I don't have or run Windows on any of my machines at home. For me, this is a whole lot of trouble for nothing. I am satisfied with the current boot loaders and I don't need this secure boot stuff period.

I am sure many others feel the same way, are we going to have a choice to be free from this "Secure Boat Anchor " stuff?

I believe working with PC vendors to supply "No Boat Anchor" machine is a better route to take than working around all the problems MS is imposing on everyone.

"Secure Boat Anchor"

That's a good one, Fettoosh!
Quoting:While Microsoft have modified their original position and all x86 Windows machines will be required to have a firmware option to disable this or to permit users to enrol their own keys, it's not really an option to force all our users to play with hard to find firmware settings before they can run Fedora.


I hope this is going to be true and respected by all OEMs.

Quoting:That's a good one, Fettoosh!


Thanks Bernard, that is exactly how it feels having it on.

Ugh,... So M$ gets what it wants,... keys to the Castle?!?! Yuk,... .just,... .Yuk.
I wonder how the whitebox sellers of systems with no OS will deal with it.
Quoting:I wonder how the whitebox sellers of systems with no OS will deal with it.


Since they are already defying MS by selling No OS systems, I am sure it will be just as easy to defy it by totally disabling UEFI.

I am surprised how quickly Fedora jumped to find a workaround, couldn't they have waited a little to see how customers are going to respond to this ploy? I am expecting that people who have legacy application are not going to be happy when these applications aren't going to run on Win 8 unless they get/purchase keys.

A small company I wrote specialized software for, which runs on Linux buys about 20 such units a year and don't need such baloney. I am sure the "No-OS" market is getting bigger, especially for Mini-formfactor desktops (8" x 5" x 1").

i thought secure boot is something like this

greetings, eMBee.
Over 3 pages of comments that clearly do not support this path. One person pointed this out: http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/... You can sign it if you like.

My comment: "I simply will not purchase any hardware that has this on it. Time to start supporting the crazy architectures & odd-named hardware manufacturer's. I'm quite certain that all hardware manufacturer's will not jump on board for this. I'd rather see a kickstarter fund to where limited hardware can be produced and supported for the Gnu+Linux sphere rather then to keep going along with the flow of the likes of redmond & intel." comment link
So...let's see some links to hardware that does not have this. Talk is cheap and it's easy to point fingers at Fedora. Ahem, Windows and gutless OEMs are the culprits. Matt Garrett was the first to sound the alarm and has speaking about this for months. Fedora is trying, which is more than you can say for the complainers.

That FSF page has been up for months, and is about as effective as any other FSF campaign.

Secure Boat Anchor. Yeah :)
Quoting: i thought secure boot is something like this


Oh boy, do I feel foolish! I was thinking of bootloaders!
tuxchick There are plenty of hardware vendors available. If you have not been following lxer.com or linuxfordevices (now closed) then I don't know what to tell you other then to get a feed reader... And don't scoff or laugh because the hardware does not fit the mold of 150TB HD, 50 gazillion GB of memory, 5 graphics cards and whatever else people think they need now a' days...

It will be a personal choice that I won't miss sleep over and it seems others will follow suit as well.
Linkies talk, kennethh, handwaving walks. Or something like that :)
@TC,

How about the link I posted above? Mini-form factor desktops (8" x 5" x 1")

I recently bought two of those for myself and the company I developed specialized software for so far bought 10 units. More on the way. They all run Kubuntu 12.04. Clonezilla is just wonderful.

This little company is a Windows XP shop and on the way to switch to Linux.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post