Top 10 secure-boot Open-Source Projects

Ventoy

392 57,808 6.9 C

A new bootable USB solution.

Project mention: Tools for Linux Distro Hoppers | dev.to | 2024-03-27

Ventoy is an open-source tool to create a bootable USB drive for ISO/WIM/IMG/VHD(x)/EFI files. Using Ventoy, we can create live USB for multiple distros in one flash disk. This is a revolutionary feature compared to other tools, e.g., Etcher, Rufus, etc, that can only create one live USB at a time. This tool is so important. Don't call yourself a distro hopper if you don't know this tool.

Rufus

548 26,835 8.7 C

The Reliable USB Formatting Utility

Project mention: Warn if (Windows ISO) media will no longer be bootable after Q1 2024 (Rufus) | news.ycombinator.com | 2023-12-23

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
Auditor

125 435 8.8 Java

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

Project mention: Auditor app version 77 released | /r/GrapheneOS | 2023-11-14

CVE-2022-21894

5 276 2.4 C

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability
AttestationServer

2 96 9.2 Java

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.
punchboot

1 81 9.0 C

Punchboot
Archboot

14 33 9.9 Shell

Archboot is a most advanced, modular Arch Linux boot/install image creation utility to generate bootable media for CD/USB/PXE, designed for installation or rescue operation.

Project mention: "The System Found Unauthorized Changes On the Firmware, Operating System UEFI Drivers" | /r/archlinux | 2023-07-08

If you can't disable secure boot, the default installer will not work for you. The easiest solution would be to use archboot, an unofficial installer maintained by one of the devs. https://archboot.com/

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
landing-zone

1 22 0.0 C

An open source implementation of an AMD-V Secure Loader.
archiso-sb-shim

1 16 4.2 Shell

A patch for mkarchiso to build secure-boot shim enabled iso
tpm-km

1 11 0.0 Shell

yet another pack of scripts for TPM2+Luks

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).