Top 8 secureboot Open-Source Projects

sbctl

94 1,302 7.8 Go

:computer: :lock: :key: Secure Boot key manager

Project mention: Show HN: Sbctl – Secure Boot key manager | news.ycombinator.com | 2023-10-20

Super-UEFIinSecureBoot-Disk

6 658 0.0

Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot

Project mention: Show HN: SSH-tpm-agent – SSH agent for TPMs | news.ycombinator.com | 2023-07-29

You can edit UEFI drivers from the operating system's bootloader, and you can even flash the UEFI itself from the OS in most computers. While secure boot. Failing that, you can shim a preloader between the bootloader and the UEFI and load arbitrary drivers despite secure boot, like is done here : https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk
Any sufficiently motivated attacker can make a UEFI rootkit happen, and it's in the wild right now. TPM really do offer no protection to users, either against userspace malware, or rootkits. It's purely about DRM.

InfluxDB

www.influxdata.com featured

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
Auditor

125 435 8.8 Java

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

Project mention: Auditor app version 77 released | /r/GrapheneOS | 2023-11-14

mortar

17 208 5.9 Shell

Framework to join Linux's physical security bricks.
AttestationServer

2 96 9.2 Java

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.
SecureBootForSteamDeck

6 23 3.2

This repository contains the instructions on how to generate and install the Platform Key (PK), Key Exchange Key (KEK) and Signature Database (DB) to enable the Secure Boot functionality in Steam Deck.

Project mention: PSA for those wondering whether to use Windows 10 vs Windows 11 | /r/WindowsOnDeck | 2023-07-10

Why am I mentioning this? The steam deck, by default, does not have the capacity to boot into secure mode as it lacks the necessary keys to do so. There is a fix but if you mess up it can't be undone and secure boot is permanently enabled. (See: https://github.com/ryanrudolfoba/SecureBootForSteamDeck for more info on how to implement it if you're tech-savvy enough).

Project-Hackintosh

3 8 1.8

Intel 10th-gen Hackintosh powered by OpenCore
SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
asm

3 2 7.3 Shell

scriptable runtime-writable livecd / hardware wrangler (by 9001)

Project mention: Which command did you run 1731 days ago? | news.ycombinator.com | 2024-01-21

We have a lot in common :-P except I'm still on bash, and do rely on PROMPT_COMMAND like you mentioned -- https://github.com/9001/asm/blob/hovudstraum/etc/profile.d/e...
Lines 11-21 can be ignored, they detect if the folder you were in got moved/deleted from another shell, to avoid the confusing behavior you get in that case.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

secureboot related posts

Show HN: Sbctl – Secure Boot key manager

1 project | news.ycombinator.com | 20 Oct 2023
Show HN: SSH-tpm-agent – SSH agent for TPMs

5 projects | news.ycombinator.com | 29 Jul 2023
PSA for those wondering whether to use Windows 10 vs Windows 11

1 project | /r/WindowsOnDeck | 10 Jul 2023
Enabling secure boot for your Arch installation is very easy now with the "sbctl" tool

2 projects | /r/archlinux | 7 Jul 2023
sbctl fails to find EFI system partition

1 project | /r/archlinux | 3 Jul 2023
Steam Deck / SteamOS - reset forgotten sudo password the quick and easy way!

1 project | /r/SteamDeck | 5 Jun 2023
Millions of PC Motherboards Were Sold With a Firmware Backdoor

4 projects | /r/hardware | 1 Jun 2023
A note from our sponsor - SaaSHub
www.saashub.com | 3 May 2024

SaaSHub helps you find the best software and product alternatives Learn more →