Changes for page UEFI Secure Boot
Last modified by Sabrina V. on 2026/02/02 10:18
From version 1.2
edited by Sabrina V.
on 2026/02/02 10:11
on 2026/02/02 10:11
Change comment:
There is no comment for this version
To version 1.3
edited by Sabrina V.
on 2026/02/02 10:15
on 2026/02/02 10:15
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -26,18 +26,18 @@ 26 26 27 27 This architecture ensures that only verified and signed components are executed during the entire boot process. 28 28 29 -= VorbereitungderBootdateien=29 += Preparation of the boot files = 30 30 31 -F ürdenPXE-Boot unter Secure BootbenötigenSie folgendeDateien,dievonderjeweiligenDistributionbereitgestellt werden:31 +For PXE booting under Secure Boot, you need the following files, which are provided by the respective distribution: 32 32 33 -* ##bootx64.efi## – Shim -Bootloader (Microsoft-signiert,aus demPaket shim-signed)34 -* ##grubx64.efi## – GRUB EFI -Bootloader (Distribution-signiert)35 -* ##vmlinuz## – Linux -Kernel (signiert)36 -* ##initrd.img## – Initial -RAM-Disk (signiert)33 +* ##bootx64.efi## – Shim bootloader (Microsoft signed, from the shim-signed package) 34 +* ##grubx64.efi## – GRUB EFI bootloader (distribution signed) 35 +* ##vmlinuz## – Linux kernel (signed) 36 +* ##initrd.img## – Initial RAM disk (signed) 37 37 38 - DieseDateienwerdeninderRegelimVerzeichnis##/tftpboot/##odereinem Unterordnerwie##/tftpboot/uefi/## abgelegt undüberDHCP/TFTPverteilt.38 +These files are usually stored in the ##/tftpboot/## directory or a subfolder such as ##/tftpboot/uefi/## and deployed via DHCP/TFTP. 39 39 40 - BeispielhafteStruktur40 +Example structure 41 41 42 42 {{code language="bash"}} 43 43 /tftpboot/ ... ... @@ -50,7 +50,7 @@ 50 50 {{/code}} 51 51 52 52 {{aagon.warnungsbox}} 53 - BeachtenSiebeimehrerenDistributionen,dassShimund GRUBimmeralspassendesPaarverwendetwerdenmüssen.JedeDistributionbringtihreigenesZertifikatsset mit.EineMischungunterschiedlicherVersionenführtdaherzuSignaturfehlernundBootabbrüchen.53 +If you have multiple distributions, please note that Shim and GRUB must always be used as a matching pair. Each distribution comes with its own set of certificates. Mixing different versions will therefore lead to signature errors and boot failures. 54 54 {{/aagon.warnungsbox}} 55 55 56 56 = Anlage der GRUB-Konfiguration =

