Help installing MX Linux with Secure Boot

[LU344928]

it is an distinct possibility that future PCs may be more difficult to convert to an Linux System.

as the Microsoft Windows System becomes the New Standard, upon which New Hardware,
is built to be used excursively by that one operating system.

If that happens hopefully companies like Star Labs and System 76 will still be around.

[richb]

richb wrote: ↑Mon Sep 27, 2021 8:33 am
@MultipleX
I would suggest you wait for the RC. It should be coming soon.

Response
WHEN

Defintion of Soon

In a prompt manner without undue delay.

[MultipleX]

Whether I actually use Win 11 or not remains to be seen. Like many others, I stopped being a fan when W10 came out. When it becomes available I will set up a W10/W11 dual boot setup and have a look at it. This will also ensure that the machine is licenced to use it. It is supposed to be an automatic upgrade from W10 provided that the hardware supports it. I have kept Win on one SSD and Linux on another which reduces complications. Data is on a third SSD.

Nevertheless, I have only a handful of programs left that I actually need to run on Windows. I previously ran WINE and also preserved the W7 partition for that purpose. On the new one have decided to move forward and set up a Win10 VM in QEMU on Linux rather than run WINE. I am looking forward to setting up in MX once the RC is available.

[MultipleX]

@MultipleX
I would suggest you wait for the RC. It should be coming soon.

Ok, I have now got MX21 RC1 installed on my computer in place of MX19. What is the process for enabling secure boot? Is it still the same as described in the other thread here:

viewtopic.php?f=23&t=58496&sid=dc4f3ee4 ... 75fbf5b535

Or has it changed?

[fehlix]

@MultipleX
I would suggest you wait for the RC. It should be coming soon.

Ok, I have now got MX21 RC1 installed on my computer in place of MX19. What is the process for enabling secure boot? Is it still the same as described in the other thread here:

viewtopic.php?f=23&t=58496&sid=dc4f3ee4 ... 75fbf5b535

Or has it changed?

Instructions will be different, b/c they will include to make those out-of-tree dkms modules signed with user's generated MOK and adjustments to EFI-loader installations. So I guess you might wait a bit until final release is out and tests have been made and proven that it indeed works.

[MultipleX]

fehlix, thanks. It was my impression from the previous comment that the tools would be available with the release of RC1. However, n.p. will wait.

[fehlix]

fehlix, thanks. It was my impression from the previous comment that the tools would be available with the release of RC1. However, n.p. will wait.

MX-21 will be released without official secure boot support. Those activities re making secure boot available for MX21 will be a kind of "first" attempt to make secure boot work for MX 21 installations. Main points to consider are driver signing e.g. virtualbox, nvidia, wifi etc and use of Debian signed kernel vs MX/antiX provided unsigned kernels. So there will be different steps/levels to satisfy depending on actual use case. The first attempt will probably not include unsigned kernels. This might be part of a next attempt to include automatic signing of MX/antiX kernels. My optimistic view on this it should be possible, but first test on different hardware made my automatic signed MX/antiX kernels to not "secure"-bootable.

[jackdotnet]

I"m wondering/asking what is the point of this focus on secure boot? Is it to have the MX distro boot process conform to the requirements of Windows 11 so then one can more conveintly dual/multi boot os's OR is it because it is a 'better' way to boot? Or something else perhaps.

[Eadwine Rose]

From what I understood W11 will not boot without secure boot. But I could be wrong, haven't followed that intensely.

[fehlix]

fehlix, thanks. It was my impression from the previous comment that the tools would be available with the release of RC1. However, n.p. will wait.

I've opened a new thread which starts with a post about enabling secure boot in MX21. Also the intention is to update this thread with further refinement of automatically signing modules and MX/antiX kernels and in addition allowing multiple MX21 and Debian installation with working UEFI boot options entries. Watch this place: "MX 21 Secure Boot" https://forum.mxlinux.org/viewtopic.php?t=67022