Mastodon Feed: Post

Boosted by jakedel@mamot.fr ("S. Delafond"):
freexian@hachyderm.io ("Freexian :debian:") wrote:

UEFI Secure Boot Signing with Debusine

How do you handle Secure Boot signing for Debian-based systems?

We've just published a detailed write-up on how Freexian uses Debusine to manage UEFI Secure Boot signing for Debian 10 ELTS.
If any part of your work touches Secure Boot, package signing, or reproducible infrastructure for Debian distributions, it’s a relevant read.

It covers:
* How signing workers are set up
* Secure Management of private keys
* Workflows to automate the tasks involved
* Future plans for extending the signing system and for better key protection

Read the post: https://www.freexian.com/blog/debusine-secure-boot-signing/

If you're working on a Debian derivative and facing similar challenges, we’d love to hear from you: sales@freexian.com

#Debian #UEFI #SecureBoot #Debusine #Freexian #LinuxSecurity