Why don't we have secureboot support?

Support & help
1

:pushpin:Question Description

Please describe the problem you’ve encountered in detail:

  • Description: Secureboot is a basic security feature which, with all due respect, isn’t that difficult to implement. For some reason, Fyde doesn’t seem to support it, but I really wonder why. Is there a good reason why it hasn’t been added or has it just been forgotten?

:computer:System & Device Information

  • Hardware & System Configuration:

    • Processor: intel i7 9th gen
    • Graphics Card(Please specify if there’s a discrete graphics card): rtx 20 series
    • RAM: 8gb
    • FydeOS Version: latest

  • Relevant System Logs:

    • Open the Chromium browser and enter /var/log/messages to retrieve logs.
    • Log Details: N/A

Note: If you’ve lost your FydeOS subscription, please refer to this FAQ for assistance.

2

Costs money. You can add it by yourself. I remember these are some guides other users shared here.

3

It doesn’t cost anything, you can easily do it and create your own signing keys. Sure, you can do it with openFyde, but not with FydeOS as you don’t have the source code.

4

FydeOS need to pay money to get secure boot certification. But you can do it by yourself with no cost.

5

Certification from whom? I have seen independent developers making their own keys and it works normally with a few extra steps.

6

Dude, ask AI if you know nothing. Company behavior is different with personal behavior.

7

Surprisingly, I don’t need to ask AI since I know people who added secureboot to their OS for free. You can generate your own UEFI signing keys, sign the bootloader and kernel themselves, and enroll these keys using MOK. All completely free. This approach is widely used. The question here is not whether FydeOS can do it but why don’t they do it.

8

If you don’t want to know the reason, there’s no need to ask in the first place—you’ve already stubbornly decided on your own answer and aren’t willing to listen to what anyone else has to say.

9

I recently thought I knew a person who does all of this for free. But when I asked about this, I found out that they still have to use Microsoft’s CA (certificates or something like that). If I undestood correctly, secureboot is something that was made by Microsoft, primarily for Windows. It can be used for other cases, but it needs certificates, which aren’t free.

10

First of all, I am asking a question here because I know from experience that secureboot does NOT have to be paid for and that you can create your own keys and do it that way, which is a known and supported process. In no way does implementing secureboot require certificates that are offered by any big tech companies such as Microsoft. Take a look at Secureblue, a linux distro maintained by one developer and it has secure boot supported. If you aren’t capable of comprehending that secureboot can be added to FydeOS, then this question is probably not meant for you but someone with higher levels of expereise, such as (presumably) one of the developers working on openFyde or FydeOS.

11

I work in the PC industry myself, so I know the inside story. I’ve already said this: individual actions and company actions are not the same thing. Just because a developer can do something doesn’t mean a company can do it. Secure Boot is just a tool used by big companies to maintain their monopoly. If you’re unwilling to believe how the business world really works, then forget it—it just shows that you’re too far away from this world of business.

12

What difference is there when I can add secureboot and Fydeos can too. You are a few google searches or one Chatgpt prompt away from knowing that secureboot is free and simple to add. No, you don’t need anything signed by microsoft, you can do it yourself. No, there is no difference between me doing it on a joke distro i am making and fydeos doing it. It would work either way.

13

regular people and official organizations have very different legal obligations in some cases. I’m assuming that’s what it is.

14

could you please share them, if you still have the link? I tried finding them, even googled “how to enable scure boot for FydeOS”, but only found a guide for a Surface tablet so far.

15

You may refer to this with translating tools:

16

Well this is what I was thinking of, but they haven’t made it universal really. When i tried to boot from USB and install, it said it doesn’t support secure boot which did not happen to me even with independent OS distributions. After all it isn’t that hard to add and they should make it available for everyone because it is possible.

17

The method I mentioned above is illegal—it involves stealing Google’s property. Individuals might get away with it, but companies absolutely cannot do this.

18

an independent OS might be (I’m not sure) in a different legal situation, where they could afford to do this without breaking any laws. And a non-independent OS often has a parent company to provide them such licenses and stuff. But as I heard, it isn’t cheap, so we can’t expect just any company to be able to afford that.

19

The difference lies in whether it’s a commercial product. For profit-driven commercial products, extreme caution is required to avoid any intellectual property flaws. Non-commercial products, however, enjoy greater leniency since you’re not profiting from them. Even if sued, there’s no money to pay in damages – hence you can afford to be bolder.