Brave New Trusted Boot World
0pointer.net · 6,599 words · saved by 1 readers
Posts and writings by Lennart Poettering
This document looks at the boot process of general purpose Linux distributions. It covers the status quo and how we envision Linux boot to work in the future with a focus on robustness and simplicity. This document will assume that the reader has comprehensive familiarity with TPM 2.0 security chips and their capabilities (e.g., PCRs, measurements, SRK), boot loaders, the shim binary, Linux, initrds, UEFI Firmware, PE binaries, and SecureBoot. Problem Description Status quo ante of the boot logic on typical Linux distributions: Most popular Linux distributions generate initrds locally,…
saved by
related reading
- systemd for Administrators, Part 10pointer.net
- systemd for Administrators, Part XIV0pointer.de
- Initial ramdisken.wikipedia.org
- Building a hypervisor, 2: Booting Linuxiovec.net
- Tiered Trust for Useful Embedded Systems Securitytockos.org
- A shallow dive into formal verificationvitalik.eth.limo
- What happens when you turn on computer? | Sanketh's Blogsankethbk.github.io
- Multiprogramming a 64kB ComputerSafely and Efficientlytockos.org
- The Linux Kernel Module Programming Guidesysprog21.github.io
- User Mode Linux HOWTO - The Linux Kernel documentationkernel.org
- The little book about OS developmentlittleosbook.github.io
- Themes from Real World Crypto 2022 - The Trail of Bits Blogblog.trailofbits.com