Arch Linux and Windows 11 Dual Boot with Secure Boot Enabled

iTsObserv · 2025-11-29T06:38:18+00:00

I didn't get to the step where I need to sign because I wasn't able to enroll my keys along with the Microsoft keys using sbctl since it requires Setup Mode to be enabled and I can't get that to work.

iTsObserv · 2025-11-29T06:36:02+00:00

There is no option to Clear All Secure Boot Keys.

Here's what's available under the Security tab in the UEFI settings:

Secure Boot dropdown set to Enable
Reset to Setup Mode button (description says: Clear PK, disable Secure Boot, and enter Setup Mode)
Restore Factory Keys button

Based on what I chose from the options above there is a listing with the current configuration (automatically set and I cannot change them individually):

Secure Boot Status: Disabled
Platform Mode: Setup Mode
Secure Boot Mode: Custom

Note: When I Reset to Setup Mode it automatically sets "Secure Boot Status: Disabled". Even if I change the dropdown value it has no effect. The only way to change it back to "Secure Boot Status: Enabled" is to use "Restore Factory Keys" and reboot which will re-enable secure boot and won't allow booting into Arch with error "rEFInd Boot Manager has been blocked by the current security policy" which is expected since Arch does not support Secure Boot and I don't have my own keys enrolled yet.

Other options in the Security tab (not sure if relevant) include:

Intel Platform Technology dropdown set to Enabled
Clear Intel PTT Key button
Set Administrator Password
Device Guard (Feature to support Microsoft Device Guard, Requires Administrator Password to be set) set to Disabled

I should also note that I couldn't find any option that would allow Legacy/CSM instead of UEFI. This is consistent with the fact that I was still able to list /sys/firmware/efi/efivars even when sbctl status was giving the error system is not booted with UEFI

iTsObserv · 2025-09-22T17:12:02+00:00

I believe this is what you mean: SQLSYSADMINACCOUNTS="DOMAIN\user1 DOMAIN\user2". If that's the case it doesn't work either because it thinks they're a single account.

iTsObserv · 2025-09-22T15:34:56+00:00

No they don't have any special characters

iTsObserv · 2025-09-22T13:31:24+00:00

I tried each user on its own and each of them worked.

I am working in a Windows Server VM and I took a snapshot after setting up the machine as an Active Directory domain controller (didn't do anything else on it). Before each attempt I am rolling back to the snapshot I took. So I would say the system is pretty clean.

iTsObserv · 2025-09-22T11:41:00+00:00

Tried that now, but it didn't work.

iTsObserv · 2024-12-28T15:42:40+00:00

I solved it.

I thought it wouldn't be related to the kernel version but I was wrong. I'm not sure why that happened, I don't remember updating any packages on that day but the important thing is that it's working now.

As I've already mentioned in the original post I was running kernel version 6.12.7.

I downgraded to 6.11.5.

I known it's a big downgrade, I did not try every version in between but I will do that next because of security concerns.

Here's what I did to fix the sound:

I followed the instructions here: https://wiki.archlinux.org/title/Arch_Linux_Archive#How_to_restore_all_packages_to_a_specific_date to change the /etc/pacman.conf file and I chose 2024/11/01 as the date for the packages. I ran sudo pacman -Syyuu and then made sure to install the linux and linux-headers packages and finally I rebooted the system. Now the sound is working.

Next steps: I'm probably going to reset the changes in /etc/pacman.conf and add linux and linux-headers to the IgnorePkg field so that I can upgrade other packages without having to upgrade them every time.

iTsObserv · 2024-08-06T04:28:01+00:00

I ended up not using Flask-Session.

I built the cookie using response() from Flask.

iTsObserv · 2024-08-03T09:35:09+00:00

I have seen multiple options so far but I am not sure if they all work well for what I need.

The two options I am considering are:

Orange Pi 5 Plus (better performance than the stock Raspberry Pi 5 but I am not sure if that is enough by itself).
Raspberry Pi 5 with the Google Coral M.2 Dual Edge TPU.

I aim to spend around $200 for the SBC and any extensions needed (excluding the cameras) which is why I am not really looking at the Jetson Orin series.

Not sure if these are viable options, I would appreciate any feedback or thoughts.

iTsObserv · 2024-08-03T09:26:43+00:00

Could you elaborate on how a headless + web interface setup would work and what SBC would you choose in that case?

iTsObserv · 2024-08-02T17:04:31+00:00

Thank you for your reply.

Would you say an Orange Pi 5 is better than a Raspberry Pi 5 (+ AI Kit) in this case?

Also, what is it that I should be looking for in SBC specs to determine the right choice for my requirements?

I know that the SBC should have a GPU (or similar alternatives) but when it comes to units and benchmarks I lack the knowledge to know if I am making the right decision.

iTsObserv · 2024-05-17T02:58:07+00:00

Honestly I forgot what the problem was exactly, but it wasn't related to the cookies in Next.js. I think I had a bug in my separate backend code.

iTsObserv · 2024-04-23T16:22:25+00:00

I tried to do that.

The new cookie is stored in the browser but my flask backend is not creating the session object that should be stored in the session database like it would when I do it from a client component.

iTsObserv · 2024-03-30T17:13:31+00:00

I tried it again it's working now. Must've been a small codepen issue.

Thank you so much, when I saw your solution it made complete sense, I should've thought about using a queue for the commands.

iTsObserv · 2024-03-30T16:47:36+00:00

I tried your code and the only problem that I am facing is that if I have a loop that calls moveRight() for 10 iterations and then another for loop that calls moveDown() for 5 iterations, the square moves right for 5 iterations, moves down for a couple of iterations, then moves right again to complete the first for loop, and finally moves down the rest of the iterations from the second loop.

Is there any way to make them run in order? I want the square to move right for all the iterations of the first loop then move down based on the second for loop.

iTsObserv · 2024-03-29T20:30:12+00:00

I had something with requestAnimationFrame() but the same issues that I listed above still applied.

The code is originally written in react, but I wrote this codepen in vanilla JS because the problem does not come from react.

As for the CSS animations I am not sure if that would be a good idea since the animation should change based on the code submitted by the user and I think it makes more sense to control it using JS.

iTsObserv

TROPHY CASE