bootspec-secureboot
By DeterminateSystems
lanzaboote
Secure Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur] (by nix-community)
bootspec-secureboot | lanzaboote | |
---|---|---|
2 | 4 | |
95 | 688 | |
- | 10.0% | |
10.0 | 8.9 | |
7 months ago | 10 days ago | |
Rust | Rust | |
MIT License | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bootspec-secureboot
Posts with mentions or reviews of bootspec-secureboot.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-08-25.
-
Stable Linux mainline builds for Ubuntu
Another option for NixOS is bootspec-secureboot, I'm using it with no real complaints: https://github.com/DeterminateSystems/bootspec-secureboot
-
Lanzaboote vs. bootspec-secureboot
I know of two projects for supporting Secure Boot on NixOS: Lanzaboote and bootspec-secureboot.
lanzaboote
Posts with mentions or reviews of lanzaboote.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-06-22.
-
What is there to NixOS that is not just `nix` the package/config/whatever manager?
Easy peasy secure boot with lanzaboote
-
Lanzaboote vs. bootspec-secureboot
I know of two projects for supporting Secure Boot on NixOS: Lanzaboote and bootspec-secureboot.
-
Nix-Powered Development with OCaml
Afaik it's not finished yet, but there recently has been quite a lot of activity regarding secureboot for nixos https://github.com/nix-community/lanzaboote/
-
It it secure to store LUKS full disk encryption keys in the TPM nowadays?
I've installed NixOS (a Linux distribution) to TerraMaster F2-423 NAS and enabled Secure boot with lanzaboote and LUKS full disk encryption. I enrolled my own secure boot keys becuase that looked like a requirement.
What are some alternatives?
When comparing bootspec-secureboot and lanzaboote you can also consider the following projects:
linux - Linux kernel builds
runix - A type-safe Rust interface to the Nix CLI
nixos-apple-silicon - Resources to install NixOS bare metal on Apple Silicon Macs
sandkasten - Run untrusted code in an isolated environment
flambda-backend - The Flambda backend project for OCaml
ocaml-flake-example - An overly elaborate example of building a ‘Hello World’ package with Nix flakes, OCaml, and Dune
devenv - Fast, Declarative, Reproducible, and Composable Developer Environments
nixos-cfgs - my NixOS system configs