Code : Tout sélectionner
sbctl create-keys
sbctl enroll-keys -m
sbctl sign -s ...
Code : Tout sélectionner
$ sbctl status
Installed: ✓ sbctl is installed
Owner GUID: 8004a0b1-cb9e-4d3e-94c1-498071f017ea
Setup Mode: ✓ Disabled
Secure Boot: ✗ Disabled
Vendor Keys: microsoft builtin-db builtin-db builtin-KEK builtin-PK
Code : Tout sélectionner
$sbctl verify
Verifying file database and EFI images in /boot...
✓ /boot/EFI/systemd/systemd-bootx64.efi is signed
✓ /boot/vmlinuz-linux is signed
✓ /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed is signed
✓ /boot/EFI/BOOT/BOOTX64.EFI is signed
Code : Tout sélectionner
$cat /boot/loader/entries/arch.conf
title Arch Linux
efi /vmlinuz-linux
initrd /intel-ucode.img
initrd /initramfs-linux.img
options initrd=initramfs-linux.img root=/dev/mapper/root rw rd.luks.name=564037c4-ab7c-4710-be2d-1d97ceceec1e=root rd.luks.options=discard
.Operating System Loader has no signature. Incompatible with SecureBoot. All bootable devices failed Secure Boot verification
Si qu'un a une idée de ce qui cloche dans mon setup, je suis preneur.