You are not logged in.

#1 2026-01-06 06:53:40

cloverskull
Member
Registered: 2018-09-30
Posts: 273

UKI and fwupd?

Hey friends, I've been toying with the idea of a unified kernel image for a bit now. I have luks encrypted root, an efi boot partition, and currently use systemd-boot.

My main reason for wanting this is to simplify the boot process. Plus, signing a single binary for secure boot seems like a good move.

However, my concern is fwupd. How does that work with UKI? What if I have some firmware to update, what happens?

Offline

#2 2026-01-06 07:59:19

mithrial
Member
Registered: 2017-03-05
Posts: 124

Re: UKI and fwupd?

The Archwiki explains a few steps: https://wiki.archlinux.org/title/Fwupd# … FI_upgrade

How it works with secure boot, I don't know but you did not mention secure boot but signing?

Offline

#3 2026-01-06 08:03:26

-thc
Member
Registered: 2017-03-15
Posts: 1,074

Re: UKI and fwupd?

The fwupd process for UEFI updates installs/activates a separate EFI executable and rewrites EFI variables (for booting into the fwupd EFI executable). The Wiki article explains this in detail.

As long as fwupd properly restores the old EFI boot manager entries - I see no interference.

Offline

Board footer

Powered by FluxBB