Improving the Secure Boot landscape: sbctl & go-uefi

" summary

Describes problems in the Secure Boot tooling ecosystem and presents sbctl (a user-facing Secure Boot management tool) and go-uefi (a low-level UEFI library) as a combined approach to simplify and unify functionality. Covers a short Secure Boot primer, compares existing tools and their missing features (signature lists, PK/KEK/db handling), and includes a brief demonstration of sbctl and go-uefi to show how they address usability and integration gaps.

AI-written summary · about

" related talks

• 38mUEFI Secure Boot in U-BootGrant Likely · Open Source Summit + Embedded Linux Conference North America 2019
• 22mBoot Requirements and Strategies for the EdgeFrançois-Frédéric Ozog · Linaro Connect Bangkok 2019
• 27mSecure Boot auto enrollmentvincent dagonneau · Linux Plumbers Conference 2022
• 45mUsing Secure Boot for the powers of goodMatthew Garrett · Open Source Bridge 2013
• 30mEnabling UEFI Secure Boot Across Modern Build SystemsFrank Vasquez · Linux Plumbers Conference 2025
• 42mUEFI Bootkits and Where UEFI Security FailsMartin Smolar · RSA Conference 2024
• 43mTowards Secure Unified Kernel Images for Generic Linux Distributions and Every...Lennart Poettering · Linux Plumbers Conference 2022
• 40mWhat should I know about secure boot and TEEs?Marta Rybczynska · foss-north 2022