nix-community/lanzaboote
View on GitHub ↗ ★ 1,919 Rust
Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]
8 mentions on Hacker News by 8 people: 0 stories, 8 comments · first 2023-03-06 · latest 2026-05-13
20082026
-
sbctl is recommended these days: https://github.com/nix-community/lanzaboote/blob/master/docs...
comment by krautsauer · 2026-05-13 · in Lanzaboote – NixOS Secure Boot -
…use Microsoft’s keys, you can enroll your own. Lanzaboote for NixOS for example doesn’t use shim - https://github.com/nix-community/lanzaboote .
comment by bpye · 2025-08-28 · in How to install TrueNAS on a Raspberry Pi -
I followed https://github.com/nix-community/lanzaboote/blob/master/docs... but naturally you don't want to include the `--microsoft` flag when running `sbctl enroll-keys` if you want to avoid microsoft keys. Also Lanzaboote is only for…
comment by craftkiller · 2025-07-19 · in Linux and Secure Boot certificate expiration -
…initrd, you own the OS. I hadn't really looked into NixOS but I like where Lanzaboote is headed. https://github.com/nix-community/lanzaboote
comment by bigfatkitten · 2024-11-21 · in I Stopped Using OpenBSD -
You can set up secure boot on NixOS with lanzaboote: https://github.com/nix-community/lanzaboote
comment by hiimshort · 2024-08-22 · in What is an SBAT and why does everyone suddenly care -
…funded by the Next Generation Internet initiative that the article says is being eliminated. [1] https://github.com/nix-community/lanzaboote
comment by spellcard199 · 2024-07-19 · in FOSS funding vanishes from EU's 2025 Horizon program plans -
…like SecureBoot back, lanzaboote [0] has worked well for me and no longer requires unstable! [0] https://github.com/nix-community/lanzaboote
comment by Cu3PO42 · 2023-11-15 · in Framework 13 with AMD Ryzen 7040 Series Makes for a Great Linux Laptop -
…finished yet, but there recently has been quite a lot of activity regarding secureboot for nixos https://github.com/nix-community/lanzaboote/
comment by phaer · 2023-03-06 · in Nix-Powered Development with OCaml