linux-secureboot-kit vs safeboot

linux-secureboot-kit

Tool for complete hardening of Linux boot chain with UEFI Secure Boot (by Snawoot)

DISCONTINUED

safeboot

Scripts to slightly improve the security of the Linux boot process with UEFI Secure Boot and TPM support (by osresearch)

Suggest topics

Source Code

safeboot.dev

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

linux-secureboot-kit		safeboot
	Project
1	Mentions	6
66	Stars	264
-	Growth	-
0.3	Activity	0.0
over 3 years ago	Latest Commit	over 1 year ago
Shell	Language	Shell
MIT License	License	GNU General Public License v3.0 only

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

linux-secureboot-kit

Posts with mentions or reviews of linux-secureboot-kit. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-01-03.

Linux-native TPM-backed Bitlocker
5 projects | /r/linux | 3 Jan 2021

u/Richard__M I am not sure how much you've dug into the architecture of Mortar, but TL;DR it bypasses grub entirely. A friend of mine developed Snawoot/linux-secureboot-kit which leverages grub's GPG capabilities to essentially daisy-chain trust and accomplish the same thing, but ran into frustrations with broken implementations of the feature with some distributions (*ahem* debian). In my opinion, chaining trust also introduces complexity which case lead to security vulnerabilities both from the software being chained, and through "oops" coding trying to get them to play nicely.

safeboot

Posts with mentions or reviews of safeboot. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-09-23.

I have a potentially odd question about unlocking my root partition automatically at boot
1 project | /r/Gentoo | 1 Nov 2021

You should look at safeboot.dev, they have some code to unseal a LUKS key without totally screwing up your system security. Alternatively systemd-boot has a module that supports it
Authenticated Boot and Disk Encryption on Linux
8 projects | news.ycombinator.com | 23 Sep 2021
Actually secure boot (on Fedora)
2 projects | /r/linux | 13 Aug 2021

See e.g. https://github.com/osresearch/safeboot/issues/84 for an example of this OpROM issue on a MSI board.
A simple boot setup with SecureBoot
1 project | /r/archlinux | 13 Jun 2021

The details can however be found here https://github.com/osresearch/safeboot/issues/84
Linux-native TPM-backed Bitlocker
5 projects | /r/linux | 3 Jan 2021

Why a separate software and not a collaboration with https://github.com/osresearch/safeboot/ ?

What are some alternatives?

When comparing linux-secureboot-kit and safeboot you can also consider the following projects:

mortar - Framework to join Linux's physical security bricks.

heads - A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

clevis - Automated Encryption Framework

TrustedGRUB2 - DEPRECATED TPM enabled GRUB2 Bootloader

cryptboot - Encrypted boot partition manager with UEFI Secure Boot support

EMBA - EMBA - The firmware security analyzer

sbctl - :computer: :lock: :key: Secure Boot key manager

tpm2-totp - Attest the trustworthiness of a device against a human using time-based one-time passwords

t4ub - A tool to get root privileges on GNU/Linux, injecting malware early in the boot chain. It also works on systems with root encrypted partition. Useful to grab LUKS passwords.