secureboot

Foxboron/sbctl

:computer: :lock: :key: Secure Boot key manager

ValdikSS/Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot

linuxmobile/kaku

革 | kaku - Elegant NixOS rice centered around the Niri tiling window manager. A minimalist, functional environment built with the philosophy of constant refinement and transformation. This dotfiles collection emphasizes aesthetic harmony and technical excellence through the declarative power of Nix flakes.

GrapheneOS/Auditor

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

noahbliss/mortar

Framework to join Linux's physical security bricks.

EETagent/T480-OpenCore-Hackintosh

OpenCore 0.6.9 configuration for T480. Optimized for Catalina and Big Sur.

GrapheneOS/AttestationServer

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

pbatard/Mosby

Mosby – More Secure Secure Boot

3intermute/ramiel

uefi diskless persistence technique + OVMF secureboot bypass

ryanrudolfoba/SecureBootForSteamDeck

This repository contains the instructions on how to generate and install the Platform Key (PK), Key Exchange Key (KEK) and Signature Database (DB) to enable the Secure Boot functionality in Steam Deck.

theo546/my-arch-setup

A repo that explain how to install Arch Linux featuring encryption, Secure Boot, btrfs and AppArmor.

dm0-/installer

Secure immutable GNU/Linux distro installer

GrapheneOS-Archive/AttestationSamples

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

abdullah-erturk/SecureBoot-Grub2FM-Suite

SecureBoot Grub2FM Suite

DimanNe/secure-boot

Really Secure Boot on Linux

9001/asm

scriptable runtime-writable livecd / hardware wrangler

abdullah-erturk/Ventoy-Grub2FM-Multiboot-With-Original-Files

Ventoy & Grub2FM Multiboot With Original Files

Zile995/booster-um

Booster UKI Manager - A simple bash script to manage UKI files generated by booster and systemd-ukify

herzhenr/Project-Hackintosh

Intel 10th-gen Hackintosh powered by OpenCore

puzzleos/stubby

UEFI bootloader stub

puzzleos/uefi-dev

QEMU/OVMF/SWTPM UEFI Secure Boot development environment

anvilsecure/symlink-secure-boot-vm

VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/defeating-secure-boot-with-symlink-attacks.html

matthewpi/nixos-config

My personal NixOS configs

pccr10001/pve-trusted-boot

Enable trusted boot with LUKS and TPM to protect root partition and VM storage.

GrapheneOS/platform_external_Auditor

Auditor app prebuilt using the latest official release of the Auditor app.

abdullah-erturk/iPXE-iso-efi-mbr-secureboot-support-

abdullah-erturk/Ventoy-Command-Line-Installer

Ventoy Command Line Installer

jonasblixt/bpak

Bitpacker

jellyterra/fedora-secureboot

Build trusted boot on Fedora. With Secure Boot and Unified Kernel Image and LUKS encrypted disk.

abdullah-erturk/Win10-Setup-Disk-WinToGo

Win10+ Setup - Win To Go

ericonr/generate-sb-efi

Automate generation of Secure Boot signed single file kernel images

HarryR/cummiboot

Encrypted PCR locked EFI Linux bootloader with Microsoft Pluton

KareemMoneeam/FOTA

This repository hosts the Firmware Over-The-Air (FOTA) system developed as part of a graduation project at Cairo University. The FOTA system enables secure, efficient, remote updates for embedded systems in smart vehicles, enhancing functionality, safety, and user experience, with strong automotive cybersecurity measures.

mkulke/mkosi-playground

Building azure images with mkosi

chyuaner/slide-Linux-SecureLUKSData

現代化開機與資料安全的Linux作業系統環境