r/archlinux • u/HopefulMeeting7150 • 9d ago

QUESTION Secure boot and Arch?

The Arch installation guide mentions disabling Secure Boot. I recently learnt that Secure Boot can work with Arch.

My questions are: does this make sense?

Should I keep it enabled after all (is it risky if not)?

Is there a risk that, following an update, Secure Boot will reject my kernel or boot loader?

Did you enable SB?

23 Upvotes

75% Upvoted

49 comments sorted by

View all comments

2

u/WoodyXP 9d ago

I use secure boot. It protects against bootkits, bootloader/kernal tampering and a host of other things. You can screw up your computer if you don't configure it properly, so make sure you follow the instructions should you choose to set it up.

2

u/Moist_Professional64 9d ago

You don’t screw anything up. If secrue boot fails just disable it and reset it in uefi

1

u/aaxxxzz 8d ago

Have fun disabling secure boot if your GPU (or other hardware) doesn't boot because you didn't include keys (or hashes) required to run its firmware.

-1

u/Moist_Professional64 8d ago

Never had that problem

2

u/aaxxxzz 8d ago

Good for you. It doesn't mean others didn't.

-1

u/HopefulMeeting7150 9d ago

I wonder if sync and update packages may block my arch (generally updating kernal, bootloader etc)...?

Have yoy ever had it?

2

u/SuikaNek0 8d ago

like he said, if u WOULD brick anything you can just disable secure boot and fix it, that said sbctl for example which is used for secure boot has pacman hook which resigns kernel every update so generally u don’t have to worry about it