Debian Signed Boot: Revision history

Jump to navigation Jump to search

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

19 January 2026

  • curprev 04:4904:49, 19 January 2026 Mrothfuss talk contribs 2,036 bytes +2,036 Created page with "Debian can be configured to sign the installed kernel/initrd automatically. This setup is done using the root user. '''Dependencies''' <nowiki> apt install gpg</nowiki> '''Generate the signing key''' <nowiki> gpg --full-gen-key</nowiki> * Use RSA (sign only) * Use 4096 bits * Set the key to never expire <nowiki> # Export your GPG key # This will be used by other software to verify the integrity of the kernel/initrd gpg --export > boot.key</nowiki> '''Setup auto-s..."