Lanzaboote vs. bootspec-secureboot

• lanzaboote

  4 667 9.0 Rust

  Secure Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]

  

I know of two projects for supporting Secure Boot on NixOS: Lanzaboote and bootspec-secureboot.

• bootspec-secureboot

  2 95 10.0 Rust
  

I know of two projects for supporting Secure Boot on NixOS: Lanzaboote and bootspec-secureboot.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• rfcs

  49 488 5.0

  The Nix community RFCs (by NixOS)

  

Both require the Bootspec patches, only support systemd-boot, have recent activity, and include a Rust-based tool for signing images.

• nixos-cfgs

  1 2 7.8 Nix

  my NixOS system configs

I had a very good time using lanzaboote as a NixOS newbie, simply following the documentation. It seems like it might be more friendly than bootspec-secureboot (which I haven't investigated). If it might be useful, I have a straightforward NixOS config using lanzaboote running on 2 machines at raehik/nixos-cfgs.

Suggest a related project