this post was submitted on 07 Jul 2025
89 points (96.8% liked)
Linux
8334 readers
452 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
That makes sense. Would a signed initramfs be possible though? Since it's usually rebuilt after most system updates?
Depends on the OS, but you can generally have
mkinitcpio
handle generating new UKIs after updates and also have it trigger something likesbctl
to re-sign images.