sicherboot - systemd-boot integration with UEFI secure boot support

Authors

       Julian Andres Klode.

Sicherboot User Manuals                         September 6, 2016                                  sicherboot(8)

Description

       sicherboot manages the systemd-boot bootloader and kernels in an EFI System Partition (ESP).  It stores a
       set of keys in /etc/sicherboot/keys to sign the binaries for use with secure boot.

Files

/etc/sicherboot/sicherboot.conf
              The sicherboot configuration file

       /etc/sicherboot/keys
              The default key storage location

       /etc/kernel/cmdline
              Kernel command line configuration file

Initial Setup

       After  installation  of  sicherboot,  setup  /etc/kernel/cmdline  and  perhaps  change  some  options  in
       /etc/sicherboot/sicherboot.conf to your liking.

       Once you have configured sicherboot as you want, run sicherboot setup to perform  the  initial  installa‐
       tion.

       sicherbootsetup
              Performs  the initial installation of sicherboot to the ESP.  This basically runs enroll-keys, in‐
              stall-kernel, bootctl install, asking before each step.

Kernel Management

sicherbootinstall-kernel[VERSION]
              Install the specified kernel version to the ESP, with initramfs and signed

       sicherbootremove-kernel[VERSION]
              Remove the specified kernel version from the ESP

Key Management

sicherbootgenerate-keys
              Generates keys in the directory configured in the KEY_HOME option.

       sicherbootenroll-keys
              Copies the public keys into the ESP, first running generate-keys if no keys exist yet.

Name

       sicherboot - systemd-boot integration with UEFI secure boot support

Other Tools

sicherbootbootctl[ARGUMENT...]
              Run the bootctl program with the specified arguments, and sign the bootloader afterwards.

       sicherbootsign-imageEXECUTABLE
              Sign the given executable using the db key.