Update new setup

This commit is contained in:
Tobias Strobel 2022-09-25 20:01:11 +02:00
parent 842511035a
commit 39633f5303
48 changed files with 944 additions and 1210 deletions

5
etc/dracut-sbctl.conf Normal file
View file

@ -0,0 +1,5 @@
# Sign unified images with sbctl keys to support secure boot
uefi_secureboot_cert="/usr/share/secureboot/keys/db/db.pem"
uefi_secureboot_key="/usr/share/secureboot/keys/db/db.key"
# Enable lockdown if secure boot's on to prevent loading unsigned kernel modules
kernel_cmdline+=" lockdown=integrity "