5 ms·

> Can systemd-boot offer me editor at boot time where I can change kernel cmdline? Yes, just press 'e' as long as editor=yes in the loader config. > Can it b

> Can systemd-boot offer me editor at boot time where I can change kernel cmdline? Yes, just press 'e' as long as editor=yes in the loader config. > Can it boot non-Linux non-systemd OSes? Yes, auto-entries will find Windows automatically and other EFI images can be set up through loader configs. Not sure why it wouldn't work with non-systemd systems considering that's an init system and it's a bootloader. > Does it handle encrypted disks better than GRUB2 does? Doesn't the initramfs handle decryption of disks? > Does it work well if I prefer bios/dos/mbr mode? No, it doesn't support BIOS boot.

yrro 6y ago
Doesn't chain loading BOOTMGR break bootlocker?
- vetinari 6y ago
  It doesn't chain-load as GRUB/MBR does. For UEFI boot loader, other operating systems are just EFI images. UEFI boot loaders do not care what specific OSes these images contain. This is also used for boot time or boot repair tools. UEFI shell for example is just another EFI image.
  - yrro 6y ago
    I thought it I validates the attestation chain so the TPM won't play ball. Hang on... https://superuser.com/questions/1278841/bitlocker-asking-for-protection-code-after-ubuntu-installation https://superuser.com/questions/1278841/bitlocker-asking-for... I cant find the reference I'm looking for which was a decent explanation about why the days of traditional style dual booting where the Linux boot loader let's you choose between Linux or Windows using GRUB to choose between Linux and Windows were over, but that question basically covers the same ground.
    - vetinari 6y ago
      On dual-boot machines, I've always prefered to use the built-in UEFI boot manager (yes, UEFI has one!). This way, Linux boots using systemd-boot/grub/whaever, Windows using NTLDR and whatever else is there, it uses its native way too. It avoids exactly this, where the TPM doesn't consider that there might be an additional component, properly signed, but might cause havoc with sealed values.
      - yrro 6y ago
        Indeed, I only meant that dual booting with GRUB (other boot loaders are available) in the boot chain are over. At least, if you want to use bootlocker with keys in the TPM anyway!

yrro 6y ago

Doesn't chain loading BOOTMGR break bootlocker?

vetinari 6y ago
It doesn't chain-load as GRUB/MBR does. For UEFI boot loader, other operating systems are just EFI images. UEFI boot loaders do not care what specific OSes these images contain. This is also used for boot time or boot repair tools. UEFI shell for example is just another EFI image.
- yrro 6y ago
  I thought it I validates the attestation chain so the TPM won't play ball. Hang on... https://superuser.com/questions/1278841/bitlocker-asking-for-protection-code-after-ubuntu-installation https://superuser.com/questions/1278841/bitlocker-asking-for... I cant find the reference I'm looking for which was a decent explanation about why the days of traditional style dual booting where the Linux boot loader let's you choose between Linux or Windows using GRUB to choose between Linux and Windows were over, but that question basically covers the same ground.
  - vetinari 6y ago
    On dual-boot machines, I've always prefered to use the built-in UEFI boot manager (yes, UEFI has one!). This way, Linux boots using systemd-boot/grub/whaever, Windows using NTLDR and whatever else is there, it uses its native way too. It avoids exactly this, where the TPM doesn't consider that there might be an additional component, properly signed, but might cause havoc with sealed values.
    - yrro 6y ago
      Indeed, I only meant that dual booting with GRUB (other boot loaders are available) in the boot chain are over. At least, if you want to use bootlocker with keys in the TPM anyway!