You are not logged in.
Pages: 1
Hey friends, I've been toying with the idea of a unified kernel image for a bit now. I have luks encrypted root, an efi boot partition, and currently use systemd-boot.
My main reason for wanting this is to simplify the boot process. Plus, signing a single binary for secure boot seems like a good move.
However, my concern is fwupd. How does that work with UKI? What if I have some firmware to update, what happens?
Offline
The Archwiki explains a few steps: https://wiki.archlinux.org/title/Fwupd# … FI_upgrade
How it works with secure boot, I don't know but you did not mention secure boot but signing?
Offline
The fwupd process for UEFI updates installs/activates a separate EFI executable and rewrites EFI variables (for booting into the fwupd EFI executable). The Wiki article explains this in detail.
As long as fwupd properly restores the old EFI boot manager entries - I see no interference.
Offline
Pages: 1