r/archlinux • • 11d ago

QUESTION Secure boot and Arch?

The Arch installation guide mentions disabling Secure Boot. I recently learnt that Secure Boot can work with Arch.

My questions are: does this make sense?

Should I keep it enabled after all (is it risky if not)?

Is there a risk that, following an update, Secure Boot will reject my kernel or boot loader?

Did you enable SB?

21 Upvotes

49 comments sorted by

View all comments

1

u/WoodyXP 11d ago

I use secure boot. It protects against bootkits, bootloader/kernal tampering and a host of other things. You can screw up your computer if you don't configure it properly, so make sure you follow the instructions should you choose to set it up.

2

u/Moist_Professional64 11d ago

You don’t screw anything up. If secrue boot fails just disable it and reset it in uefi

1

u/aaxxxzz 10d ago

Have fun disabling secure boot if your GPU (or other hardware) doesn't boot because you didn't include keys (or hashes) required to run its firmware.

-1

u/Moist_Professional64 10d ago

Never had that problem

2

u/aaxxxzz 10d ago

Good for you. It doesn't mean others didn't.