2022-11-24 05:19:30 -05:00
|
|
|
# Lanzaboote
|
2022-11-21 09:36:39 -05:00
|
|
|
|
2022-11-24 05:19:30 -05:00
|
|
|
|
|
|
|
|
[](https://www.rust-lang.org/)
|
|
|
|
|
[](https://github.com/Naereen/StrapDown.js/blob/master/LICENSE)
|
2022-11-21 09:36:39 -05:00
|
|
|
|
2022-11-24 05:19:30 -05:00
|
|
|
🚧🚧🚧 **This is not working yet. Come back later.*** 🚧🚧🚧
|
2022-11-21 09:36:39 -05:00
|
|
|
|
2022-11-24 05:19:30 -05:00
|
|
|
This repository contains experimental tooling for Secure Boot on
|
|
|
|
|
[NixOS](https://nixos.org/).
|
2022-11-21 10:02:20 -05:00
|
|
|
|
2022-11-24 05:19:30 -05:00
|
|
|
## lanzatool
|
|
|
|
|
|
|
|
|
|
`lanzatool` is a Linux command line application that takes a
|
|
|
|
|
[bootspec](https://github.com/NixOS/rfcs/pull/125) document and
|
|
|
|
|
installs the boot files into the UEFI
|
|
|
|
|
[ESP](https://en.wikipedia.org/wiki/EFI_system_partition).
|
|
|
|
|
|
|
|
|
|
## lanzaboote
|
|
|
|
|
|
|
|
|
|
`lanzaboote` is a UEFI application that is started by systemd-boot (or
|
|
|
|
|
any other EFI boot loader) and loads a Linux kernel and initrd without
|
|
|
|
|
breaking the Secure Boot chain of trust.
|
|
|
|
|
|
|
|
|
|
The information what kernel with what command line and initrd to boot
|
|
|
|
|
is embedded into the `lanzaboote` by `lanzatool`.
|
