Super-UEFIinSecureBoot-Disk VS Cubic

You can edit UEFI drivers from the operating system's bootloader, and you can even flash the UEFI itself from the OS in most computers. While secure boot. Failing that, you can shim a preloader between the bootloader and the UEFI and load arbitrary drivers despite secure boot, like is done here : https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk

Any sufficiently motivated attacker can make a UEFI rootkit happen, and it's in the wild right now. TPM really do offer no protection to users, either against userspace malware, or rootkits. It's purely about DRM.

Badabing badaboom

I was able to get around this by using a signed grub bootloader instead. What I did was modify a minimal grub disk from here to point to my manjaro installation using the partition uuid in its grub config. Its basically used to bypass secure boot and chainload the default unsigned grub2 which will start the system.

Try this if you want FreeBSD on a Secure Boot PC. I do this on my work PC.

This project works pretty good getting around the forced secure boot with the VCS: https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk

I've used Cubic before and really liked it.

Do you have any resource, tip or suggestion to proper debloat it? I'm also try to find out how https://github.com/PJ-Singh-001/Cubic works to make a custom ISO.

> a full OS made on web technologies

I think that's not unlike what ChromeOS is trying to be? With the APIs like WebSerial and WebUSB enabling web apps to do the same things native apps could for years now. (Of course, you can use these in the standalone Chromium, too.)

> an OS with just Firefox would really make everything simpler

It's relatively easy to build a Linux distro that boots straight into Firefox! You can try Cubic, which allows you to create a custom ISO for Debian or Ubuntu with a pretty straightforward GUI wizard. I once used it to create an ISO for an arcade machine.

[1]: https://github.com/PJ-Singh-001/Cubic

Gotcha, Cubic might be what you're looking for then. Found it looking for a similar Fedora alternative a while back.

You'll most likely want something like CubicCubic as it just let's you customise any Debian based distro to your needs to become a live iso with a nice GUI or command line access.