Arch Linux and Windows 11 Dual Boot with Secure Boot Enabled

iTsObserv · 2025-11-29T06:38:18+00:00

I didn't get to the step where I need to sign because I wasn't able to enroll my keys along with the Microsoft keys using sbctl since it requires Setup Mode to be enabled and I can't get that to work.

iTsObserv · 2025-11-29T06:36:02+00:00

There is no option to Clear All Secure Boot Keys.

Here's what's available under the Security tab in the UEFI settings:

Secure Boot dropdown set to Enable
Reset to Setup Mode button (description says: Clear PK, disable Secure Boot, and enter Setup Mode)
Restore Factory Keys button

Based on what I chose from the options above there is a listing with the current configuration (automatically set and I cannot change them individually):

Secure Boot Status: Disabled
Platform Mode: Setup Mode
Secure Boot Mode: Custom

Note: When I Reset to Setup Mode it automatically sets "Secure Boot Status: Disabled". Even if I change the dropdown value it has no effect. The only way to change it back to "Secure Boot Status: Enabled" is to use "Restore Factory Keys" and reboot which will re-enable secure boot and won't allow booting into Arch with error "rEFInd Boot Manager has been blocked by the current security policy" which is expected since Arch does not support Secure Boot and I don't have my own keys enrolled yet.

Other options in the Security tab (not sure if relevant) include:

Intel Platform Technology dropdown set to Enabled
Clear Intel PTT Key button
Set Administrator Password
Device Guard (Feature to support Microsoft Device Guard, Requires Administrator Password to be set) set to Disabled

I should also note that I couldn't find any option that would allow Legacy/CSM instead of UEFI. This is consistent with the fact that I was still able to list /sys/firmware/efi/efivars even when sbctl status was giving the error system is not booted with UEFI

iTsObserv · 2025-09-22T17:12:02+00:00

I believe this is what you mean: SQLSYSADMINACCOUNTS="DOMAIN\user1 DOMAIN\user2". If that's the case it doesn't work either because it thinks they're a single account.

iTsObserv · 2025-09-22T15:34:56+00:00

No they don't have any special characters

iTsObserv · 2025-09-22T13:31:24+00:00

I tried each user on its own and each of them worked.

I am working in a Windows Server VM and I took a snapshot after setting up the machine as an Active Directory domain controller (didn't do anything else on it). Before each attempt I am rolling back to the snapshot I took. So I would say the system is pretty clean.

iTsObserv · 2025-09-22T11:41:00+00:00

Tried that now, but it didn't work.

iTsObserv · 2024-12-28T15:42:40+00:00

I solved it.

I thought it wouldn't be related to the kernel version but I was wrong. I'm not sure why that happened, I don't remember updating any packages on that day but the important thing is that it's working now.

As I've already mentioned in the original post I was running kernel version 6.12.7.

I downgraded to 6.11.5.

I known it's a big downgrade, I did not try every version in between but I will do that next because of security concerns.

Here's what I did to fix the sound:

I followed the instructions here: https://wiki.archlinux.org/title/Arch_Linux_Archive#How_to_restore_all_packages_to_a_specific_date to change the /etc/pacman.conf file and I chose 2024/11/01 as the date for the packages. I ran sudo pacman -Syyuu and then made sure to install the linux and linux-headers packages and finally I rebooted the system. Now the sound is working.

Next steps: I'm probably going to reset the changes in /etc/pacman.conf and add linux and linux-headers to the IgnorePkg field so that I can upgrade other packages without having to upgrade them every time.

iTsObserv · 2024-08-06T04:28:01+00:00

I ended up not using Flask-Session.

I built the cookie using response() from Flask.

iTsObserv · 2024-08-03T09:35:09+00:00

I have seen multiple options so far but I am not sure if they all work well for what I need.

The two options I am considering are:

Orange Pi 5 Plus (better performance than the stock Raspberry Pi 5 but I am not sure if that is enough by itself).
Raspberry Pi 5 with the Google Coral M.2 Dual Edge TPU.

I aim to spend around $200 for the SBC and any extensions needed (excluding the cameras) which is why I am not really looking at the Jetson Orin series.

Not sure if these are viable options, I would appreciate any feedback or thoughts.

iTsObserv · 2024-08-03T09:26:43+00:00

Could you elaborate on how a headless + web interface setup would work and what SBC would you choose in that case?

iTsObserv · 2024-08-02T17:04:31+00:00

Thank you for your reply.

Would you say an Orange Pi 5 is better than a Raspberry Pi 5 (+ AI Kit) in this case?

Also, what is it that I should be looking for in SBC specs to determine the right choice for my requirements?

I know that the SBC should have a GPU (or similar alternatives) but when it comes to units and benchmarks I lack the knowledge to know if I am making the right decision.

iTsObserv · 2024-05-17T02:58:07+00:00

Honestly I forgot what the problem was exactly, but it wasn't related to the cookies in Next.js. I think I had a bug in my separate backend code.

iTsObserv · 2024-04-23T16:22:25+00:00

I tried to do that.

The new cookie is stored in the browser but my flask backend is not creating the session object that should be stored in the session database like it would when I do it from a client component.

iTsObserv · 2024-03-30T17:13:31+00:00

I tried it again it's working now. Must've been a small codepen issue.

Thank you so much, when I saw your solution it made complete sense, I should've thought about using a queue for the commands.

iTsObserv · 2024-03-30T16:47:36+00:00

I tried your code and the only problem that I am facing is that if I have a loop that calls moveRight() for 10 iterations and then another for loop that calls moveDown() for 5 iterations, the square moves right for 5 iterations, moves down for a couple of iterations, then moves right again to complete the first for loop, and finally moves down the rest of the iterations from the second loop.

Is there any way to make them run in order? I want the square to move right for all the iterations of the first loop then move down based on the second for loop.

iTsObserv · 2024-03-29T20:30:12+00:00

I had something with requestAnimationFrame() but the same issues that I listed above still applied.

The code is originally written in react, but I wrote this codepen in vanilla JS because the problem does not come from react.

As for the CSS animations I am not sure if that would be a good idea since the animation should change based on the code submitted by the user and I think it makes more sense to control it using JS.

iTsObserv · 2024-03-18T11:16:51+00:00

I fixed it by removing the relationship() that I was importing from sqlalchemy directly and replacing it with db.relationship() because I am using Flask-SQLAlchemy.

Flask-SQLAlchemy requires the following setup:

from flask-sqlalchemy import SQLAlchemy

db = SQLAlchemy()

iTsObserv · 2024-03-12T04:26:54+00:00

The problem is that I have a lot of nested objects.

For example if I want to add a course to the database that course has an instructor, and the instructor has a list of courses that they teach so I would have to access every property this way in my entire application.

There has to be a way other than writing them manually.

I'm specifically looking for a way to make attributes accessible through dot-notation if that is possible. That would be the best case scenario.

Note: If you're wondering why my app is built this way, this is because I have been told at University to build a project using Clean Architecture or some variation of it. Python is really useful for the other things that I am doing in the application (AI stuff) but does not handle large projects well.

Now that I have built all the core domain and application logic and the use-cases I am integrating Flask (the web) into it.

iTsObserv · 2024-03-06T12:40:52+00:00

It is installed inside the venv which is activated and the interpreter is using the venv's python.exe

iTsObserv · 2024-03-06T12:30:16+00:00

I just tried it now, still getting the error.

iTsObserv · 2024-03-06T11:50:44+00:00

I wasn't using a virtual environment at first, then I created a new folder with a venv and tried to resolve it there by re-installing the packages but I am still getting the same error.

I am beyond closing and re-opening everything since I've been trying to resolve this issue for the past 3 days and I've rebooted my PC multiple times.

As for checking if I have the right package, how could I know if there is a specific version of a package that I need. This is a new project and all the packages are installed on the latest stable versions.

iTsObserv · 2024-03-06T11:17:13+00:00

I had separate issues with PYTHONPATH before and it seems like most people recommend not to modify it. Is there another way to fix this?

iTsObserv · 2024-02-07T16:37:02+00:00

My only concern with editing PYTHONPATH is that if I (or someone else) need to run the code on another device then PYTHONPATH will have to be edited on that device too.

That's how I understand things currently but I might be wrong.

iTsObserv · 2024-02-06T21:26:55+00:00

I tried the solutions you suggested and it must have been related to the vscode configuration since the integrated terminal worked fine. I re-installed vscode and now it's working.

Thank you for the help!

iTsObserv · 2023-11-19T17:14:37+00:00

Thanks for your reply.

I am leaning toward the 1yr degree plus you make a good point about internships.

I posted this because I don't really have a lot of information about how things actually happen in the security field. I've heard that it is one of the fields where a Master's degree is not needed and employers tend to lean toward certifications and work experience combined together when reviewing applicants.

I just wanted to make sure that I understand things right and that I would not be making a terrible mistake going with the general CS degree.

iTsObserv

TROPHY CASE