lanzaboote/README.md

1.1 KiB

Lanzaboote

GitHub branch checks state made-with-rust GitHub license

🚧🚧🚧 This is not working yet. Come back later.* 🚧🚧🚧

This repository contains experimental tooling for Secure Boot on NixOS.

lanzatool

lanzatool is a Linux command line application that takes a bootspec document and installs the boot files into the UEFI ESP.

lanzaboote

lanzaboote is a UEFI application that is started by systemd-boot (or any other EFI boot loader) and loads a Linux kernel and initrd without breaking the Secure Boot chain of trust.

The information what kernel with what command line and initrd to boot is embedded into the lanzaboote by lanzatool.