Hey guys,
I’ve just set up Arch on my Surface Pro 9 and it’s already working pretty good. But I am wondering, how you handle the situation with “Secure Boot”. Do you keep it disabled or do you set it up? If so, how do you do it?
I read https://github.com/linux-surface/linux-surface/wiki/Installation-and-Setup#Arch but I’m a little confused, how this should be done.
~sp3ctre
I haven’t tried recently, but secureboot on arch just seems a complete pain in the ass. I wouldn’t bother, if the private keys to sign binaries is on your PC, then anyone who gets on your PC can sign anything they like, so secureboot doesn’t buy you much.
The main reason for me to use Secure Boot would actually be, that the ugly red “unlocked”-symbol at boot would disappear.
Extra security is nice, but only if there’s a stable (& easy) solution available.
Can I suggest closing your eyes during boot? :D
https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#PreLoader
This doesn’t seem to difficult, worth a try?
