sdsb 0.0.1

Unified system for bootloader configs, initramfs, and self-controlled secureboot
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# sdsb - Self-Determination for Secure Boot
This program is designed to provide a simpler framework for creating kernels with different initramfs generators (such as [`mkinitcpio`][mkinitcpio], [`dracut`][dracut] and [`booster`][booster]), embedding them in [Unified Kernel Images][uki], and generating a configured bootloader to load these images from boot. 

It uses [`sbctl`][sbctl] (or potentially some other framework) to use your own Secure Boot keys to lock down the entire boot chain. The idea is to do this in a relatively declarative manner that can ideally replace the various messy ad-hoc scripts used for generating bootloader configurations which have mixed support for non-mkinitcpio generators on Arch or other distributions.

This program is significantly influenced by the contents of the [Controlling Secure Boot][control-sb] page by Rod Smith

[mkinitcpio]: https://wiki.archlinux.org/title/Mkinitcpio
[dracut]: https://wiki.archlinux.org/title/Dracut
[booster]: https://wiki.archlinux.org/title/Booster
[sbctl]: https://github.com/Foxboron/sbctl

[uki]: https://wiki.archlinux.org/title/Unified_kernel_image
[control-sb]: https://www.rodsbooks.com/efi-bootloaders/controlling-sb.html