0

I want to sometimes use Linux, sometimes windows.

I found out that, Puppy Linux is small, I can install it on a USB. But the problem is, if I click on my USB in the boot menu, I have to disable secure boot first.

I found out, I will need a secure boot key. But I cant find it anywhere.

Does anybody know where to get the Puppy Linux secure boot key? Thank you sm. (I dont want to keep secureboot turned off. Read more about my opinion here: My opinion

Improve this question
1
  • The whole point of Secure Boot is that you get certainty that you're only booting trusted operating systems. Puppy has broken signatures. Commented Jan 14, 2023 at 22:17

1 Answer 1

Reset to default
2

Tested on FossaPup64 9.5. It's all broken.

Puppy Linux uses old Debian's shim + their own GRUB. Debian's shim allow to run any non-Debian .efi executables, but for that the custom signing key should be added upon boot, with a special dialogue program called MokManager.

However, there were multiple vulnerabilities in GRUB since 2019, the files from which uses Puppy, and the MokManager signing key have been revoked, that's why Puppy's GRUB cannot launch because MokManager cannot launch to import the key.

If we remove the key from the revoked list and add the required key with MokManager, we will get into GRUB, which, however, cannot load the OS, with "Bootloader has not verified the loaded image. System is compromised. Halting." message. It seems that the kernel is signed with yet another key (or not signed at all).

You have two options:

  1. Generate your own signing keys, sign the bootloader and the kernel of Puppy Linux yourself. You have to do that every time the bootloader or kernel is updated. You would also probably need to sign all the modules, however that depends on how the kernel is compiled.

  2. Ask Puppy developers to fix their Secure Boot.

  3. Easy solution: Super UEFIinSecureBoot Disk.

Improve this answer
3
  • 4. Option: don't use a niche Linux distro but something with working signed boot infrastructure, like fedora and Ubuntu do out of the box. Puppy didn't seem to fulfill any specific need OP has - it just "read" interesting Commented Jan 14, 2023 at 22:16
  • @MarcusMüller I was thinking about Fedora but i have very small pen drive and wanted something portable but these are very big distros. Commented Jan 15, 2023 at 13:46
  • Thanks. I'll try the UEFIinSecureBoot :) Commented Jan 15, 2023 at 13:48

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.