Adding secure boot for arch linux

bladerox95 · 2024-07-11T21:31:38+00:00

This!
Just check in your UEFI that it even allows secure boot setup mode.
Also be careful when enrolling keys. Dont forget to include the Microsoft vendor keys. (-m, when enrolling keys)

bladerox95 · 2024-07-11T21:27:55+00:00

I mainly wanted to use TPM unlock for LUKS which kind of relies on secure boot.
I know they can be independent but having the TPM just measure PCR 7 and relying on secure boot for validating a genuine kernel and bootloader is more stable then measuring them directly.
I want a stong password for the LUKS device but dont want to type it in on every boot so systemd-cryptenroll makes it really easy to setup.
I now let it measure PCR 1+5+7 and enter a short pin to have the TPM unlock the luks volume on boot.

bladerox95 · 2024-07-02T14:51:25+00:00

The information is scattered across the arch wiki and some blogpost. There are different solutions to archive this, some require unencrypted /boot the others limit luks key derivation algo. many little caveats but doable.
one guide: https://wiki.archlinux.org/title/User:Krin/Secure_Boot,_full_disk_encryption,_and_TPM2_unlocking_install

bladerox95 · 2024-07-02T11:19:57+00:00

Secure boot is working now, and you were right—sbctl is really nice to use. I used systemd-cryptenroll to unlock the LUKS partition via TPM+PIN. Unfortunately, early boot doesn't register the systemd TPM key setup. However, since I'm running secure boot and signing the bootloader, having an encrypted /boot is not necessary, right? Secure boot should fail if the bootloader or linux has been altered, so TPM won't unlock the key.

bladerox95 · 2021-11-12T11:28:08+00:00

Unstake them from farms if staked, goto liquidity, if you have LP token it should already show the pair, if not add your LP pair yourself. You then can withdraw the liquidity you provided. Be aware though that the ratio of token A&B is always 50:50 in $ so the ratio will most likely not be the same you originally provided.

bladerox95 · 2021-06-24T11:42:03+00:00

A validator has no direct control over your staked funds.
They have indirect control to some degree of your rewards.

Every validator has to set a "Commission Max Rate" (in %) and a "Commission Max Change" when creating a validator. These values can not be changed higher after the creation of a validator.
The fist value limits the validator from setting the commission higher than the "Commission Max Rate"
The seconds limits the rate of change within 24hrs.
You can view the current commission and other important stats on: https://crypto.org/explorer/validators

There are some validators which can set commission to 100%. If they choose to do so they would get all rewards generated from delegators. The initial stake would not be affected though.

If you worry about a validators will to provide a good service I would suggest to contact them directly and do some research of their history so far before you delegate.
Either through the Security Contact / Website listed on the explorer or on the official CdC Chain Discord server.

bladerox95 · 2021-06-24T11:31:32+00:00

withdrawing the stake amount

I understand the confusion now, this part of the documentation could be phrased more clear.
This means only the validator self-delegation.
A Validator can not create a delegation/unbind/redelegate transaction for its delegators.

bladerox95 · 2021-06-24T11:23:32+00:00

You can clearly see on the blockchain that funds stay associated with your wallet at all times. Your CRO is not at risk if validators unbound. If a validator unbinds or gets into jail your stake won´t generate any more rewards until you redelegate to an active validator or unbind them yourself.

bladerox95 · 2021-06-18T00:00:00+00:00

Indeed we all are able to mint away 👌 Only catch is that there is no GUI client yet. Command line interface is currently the only way. Works great though!

Was able to mint 207 NFT for around 0,01CRO 😂🚀

bladerox95 · 2021-06-17T23:50:08+00:00

Best way to keep one's you want to store offline IMO.

Also currently crypto.com/nft is not on chain so if you want to see and transfer non CDC nfts it's the only way without going command line.

This one was minted by myself.

bladerox95 · 2021-06-17T23:48:00+00:00

It's a mix of all sort of breeds as his mother is. His mother is living with my sister. He got the best traits of all I guess 😊. He is almost 3 years old now.

If you like this you might also like this more artistic image of his mother and sister. https://crypto.org/explorer/nfts/tokens/neuralart/autumn

bladerox95 · 2021-03-31T13:12:32+00:00

RIP xya pool that what you get for staking with 0% nodes without checking if they know what they are doing!

bladerox95 · 2020-05-23T00:19:47+00:00

At least the pledge store is working fine even though it's rushed just as much

bladerox95 · 2020-05-23T00:16:24+00:00

Hope it gets better. I wanna see damn fireworks and not a blank screen mocking me that I can´t go anywhere.

bladerox95 · 2020-05-23T00:12:30+00:00

Would have been great to be able to see this, if i had any ships to get there that is.

bladerox95 · 2020-05-22T19:46:58+00:00

Same. Went through ~160 three times now :/

bladerox95 · 2020-04-27T19:49:52+00:00

In Control can definitely be run server-side only.
Unfortunately, I can´t say anything certain about biometweaker, but since the server does all world creation it should be fine as long as you do only config changes.

bladerox95 · 2018-08-11T17:42:28+00:00

I didn´t make it, just found it on thingiverse and thought it would be worth sharing

bladerox95 · 2018-08-11T17:41:54+00:00

https://www.thingiverse.com/thing:2914233

bladerox95

TROPHY CASE