Will MX-25 come with secureboot?

[nakul]

HI MX Team,
will you provide secure boot option in MX-25?

[fehlix]

The option to LiveBoot and install with secureboot enabled is already prepared and possible with MX-23.
Some manually steps are involved in order to also successfully secureboot the installed system.
There is somewhere a write up within this forum how to achieve this.
But some restriction are involved, like dkms-wifi driver and liquorix kernels provided by MX,
are not signed. In addtion some tools provided by MX involved with boot loader or UEFI needs to
be carefully used, to avoid breaking secureboot boot loader.
So in case you do not need unsigned driver or kernels, you will probably also be able to install MX-25 with enabled secureboot.
Also there are no restrictions for you to sign the unsigned kernels or driver by yourself so they can be
used with secureboot enabled.

[FullScale4Me]

This has been a discussion here about how to turn it on from time to time (that I have seen in MX 21 and MX 23).

So the TL;DR answer is: Secure Boot has been a user configurable option for 4+ years.

‘MX-23 Secure Boot How-to‘ update on April 24, 2025 to include MX 23. PDF 82 Kb. This PDF is a conversion of an MX 21 post in this forum by felix, one of the MX developers.

[operadude]

@fehlix & @FullScale4Me

Thanks for the posts and the resulting "How-To"

Greatly appreciate the 1-page short-form.

As an old CS professor was fond of saying:

"Crisp, Clean & Concise"

[FullScale4Me]

The 3 page version lurks behind :-)

https://fullscale4me.com/MX-23-Secure-Boot.pdf

[operadude]

'Scraped'...and...

"Loving it"

[nakul]

This has been a discussion here about how to turn it on from time to time (that I have seen in MX 21 and MX 23).

So the TL;DR answer is: Secure Boot has been a user configurable option for 4+ years.

‘MX-23 Secure Boot How-to‘ update on April 24, 2025 to include MX 23. PDF 82 Kb. This PDF is a conversion of an MX 21 post in this forum by felix, one of the MX developers.

This is coming when i try to install it.

[baldyeti]

according to the grub-install man page:

Code: Select all

       --bootloader-id=ID
              the ID of bootloader. This option is only available on EFI and Macs.

so: a single option, introduced by two dashes

@FullScale4Me perhaps an erratum for your nice HowTo note

[FullScale4Me]

This is coming when i try to install it.

That screen is telling you where to read for your solution.

Your peril is why I shy away from command line recommendations in my How-To documents (target audience - beginners & up). Also, this experience is why none were included in this doc, as Grub commands are both numerous and complex.

[FullScale4Me]

according to the grub-install man page:

Code: Select all

       --bootloader-id=ID
              the ID of bootloader. This option is only available on EFI and Macs.

so: a single option, introduced by two dashes

@FullScale4Me perhaps an erratum for your nice HowTo note

Thanks for that. I'll add this to my notes for future inclusion.