FAQ

Additional Reasons for LinuxBoot Just in case the front page did not convince you… You can use any filesystem that Linux supports, not just FAT. You can implement boot policies using normal Linux applications, e.g. shell scripts or binaries, rather than manipulating opaque NVRAM variables. You can run Linux applications straight from the ROM. You can avoid legacy partitions entirely and use LVM for flexible volume management. You can build it yourself and verify that the reproducible build matches what others have built to ensure that the firmware is clean. You can have the firmware attest to you via TOTP that it hasn’t been changed. You can have a fully encrypted disk, with secrets sealed in the TPM and only unsealed if the firmware is unmodified. You can include device drivers for things that UEFI doesn’t support. You can use external hardware tokens like a Yubikey to sign the OS install and have the firmware validate the GPG signature. LinuxBoot, NERF, HEADS? What’s What? LinuxBoot is the project that replaces specific firmware functionality with a Linux kernel. LinuxBoot is agnostic to what initramfs is used with the kernel.