Is there an easy way to use secure boot for a native linux system ?

[you2]

I want to upgrade my sandy bridge system (2500k) to alder lake and to use the chip's gpu i have to have secure boot enabled. Alas I'm behind the times and not sure what it takes. I.e, does secure boot actually require some sort of certificate or is it just an abuse of the word secure. I'm currently running ubuntu 20.04.

 

[Nobu]

I want to upgrade my sandy bridge system (2500k) to alder lake and to use the chip's gpu i have to have secure boot enabled. Alas I'm behind the times and not sure what it takes. I.e, does secure boot actually require some sort of certificate or is it just an abuse of the word secure. I'm currently running ubuntu 20.04.

You need to sign the efi binary (usually the Linux kernel, sometimes a bootloader) with a key that is trusted by your efi firmware. Beyond that, I haven't looked into it much.

 

[Vermillion]

I've never done it myself but Ubuntu does have working Secure Boot support and their wiki goes into detail about how to enable it all.

https://wiki.ubuntu.com/UEFI/SecureBoot

 

[toast0]

Do you need secure boot or just UEFI?

 

[you2]

Do you need secure boot or just UEFI?

If you disable secure boot in the bios; then you cannot use cpu igp - which seems bizzare to myself.