This commit is contained in:
Thibault “Adædra” Hamel 2024-06-15 04:20:25 +02:00
parent fc1a9cb9fe
commit 5f8b9b4228

View File

@ -113,7 +113,7 @@ If you have static UEFI binaries, like the UEFI Shell or a third party bootloade
sbctl sign -s /boot/efi/EFI/… sbctl sign -s /boot/efi/EFI/…
.... ....
The `+-s+` flag tells `+sbctl+` to remember this path. In the future, if you modify any of those files, you can just issue `+sbctl sign -TODO+` to check and resign every known file. The `+-s+` flag tells `+sbctl+` to remember this path. In the future, if you modify any of those files, you can just issue `+sbctl sign-all+` to check and resign every known file.
Warning: Ensure that `+sbctl verify+` validates your boot files before rebooting! If you reboot without signing your files, your system will refuse to boot, now that the certificates are registered. Warning: Ensure that `+sbctl verify+` validates your boot files before rebooting! If you reboot without signing your files, your system will refuse to boot, now that the certificates are registered.