<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Boot on WhyNotHugo</title><link>https://whynothugo.nl/tags/boot/</link><description>Recent content in Boot on WhyNotHugo</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Sun, 28 Aug 2022 11:40:21 +0200</lastBuildDate><atom:link href="https://whynothugo.nl/tags/boot/posts.xml" rel="self" type="application/rss+xml"/><item><title>A simple boot setup with SecureBoot</title><link>https://whynothugo.nl/journal/2021/06/11/a-simple-boot-setup-with-secureboot/</link><pubDate>Fri, 11 Jun 2021 00:00:00 +0000</pubDate><guid>https://whynothugo.nl/journal/2021/06/11/a-simple-boot-setup-with-secureboot/</guid><description>I use a pretty simple setup for booting my systems.
The hardware firmware (UEFI) loads a signed bootloader (systemd-boot in my case, but gummiboot is basically the same for non-systemd systems). The bootloader loads a signed executable that bundles the kernel, initrd and the cmdline (I&amp;rsquo;ll call this the bundle&amp;quot; from here on). The initrd prompts for the encryption passphrase, mounted the decrypted disk, and then boots the actual OS. That&amp;rsquo;s the basic boot process.</description></item></channel></rss>