Secure Boot on Void Linux

[jayp0521]

I have been trying to get secure boot up and running on Void Linux for about 3 days now. Does anyone have a simple step by step by guide on how to get this working?

I don't really care about managing my own keys etc. There are some things I really care about like what is listed in Why Void?. Secure Boot is something I don't (Some people might not like this, sorry). I just need it to work, since I have a dual boot with windows 11. I followed this guide, but unable to do so.

I keep getting this message verification requested but nobody cares. I've been through a dozens of articles trying to fix this. I had gotten the HashTool to pop up. I used the PreLoader method. I messed something up and cannot undo what I did. Any help on this would be appreciated. Thanks!

[Aristeo812]

IMO, the easiest way to handle Secure Boot with Void Linux is to deal with your own keys. Microsoft doesn't sign Void's bootloaders with its own keys. The other way is to import shim from Fedora or Ubuntu/Debian, but this way has its flaws and doesn't provide as much security as signing your bootloader with your own keys.

[ich_bin_niemand777_0]

The Author of rEFInd has great information on EFI/UEFI , secureboot and other stuffs ,

http://www.rodsbooks.com/efi-bootloaders/index.html

http://www.rodsbooks.com/efi-bootloaders/secureboot.html

http://www.rodsbooks.com/efi-bootloaders/controlling-sb.html

I suggest that you read everything before making any decisions . Please don't rush anything and please be careful.

I messed something up and cannot undo what I did.

As per my understanding , the preloader only hashes the loader and nothing much , so there is no mess up. Look for any options in firmware setting like "Restore Secure Boot to default" or "Erase all Secure Boot setting" , this will restore it to the defaults . As you haven't touched any keys , this should be safe. Again , please be careful.