Is a good idea enable the secure boot?

Hi,
In order to install EndeavourOS I had to disable secure boot and now I was wondering if it would be a good idea to re-enable it. My setup is a bit strange because I have a dual boot with windows 11 and EndeavourOS on a luks encrypted btrfs partition. I use grub as my bootloader with grub-btrfs for the snapshto list in the grub menu. What can be the possible disadvantages/problems of enabling secure boot?

You would need to do some manual work to enable secureboot. It is possible, but more difficult, when using grub.

See here for more info: https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

Ok, so is better if I change the bootloader to systemd-boot. Is possible switch to systemd-boot? Because I really need of the bootable snapshot in the boot menu. I have found some post that suggest to use rEFInd (this and this). I can have both bootloader and chose from the UEFI settings which boot, right?
Thanks

No, if you want snapshot booting, stick with grub.

I think the question you should be asking yourself is ā€œWhat is the benefit I will get from secure boot and does it effect my use case?ā€

1 Like

Hello,

this is a post of someone, who wants to install EOS on a new laptop - last installation is some longer time ago.

In preparation of EOS installation to the new machine I have read several post and forums and blogs. As I like as much ā€œsecureā€ as possible I also was looking for secure boot.

BUT I imediately stopped thinking about it, when I read something like ā€œWarning! Be careful! It is possible to brick the computer, if something goes wrongā€. :scream:

So, no way for me; I like this new laptop too much :wink:. But it is your choice.
Photor

I donā€™t consider ā€˜obscuringā€™ the OS much of a feature, but your opinions may vary.
Iā€™d secure MY data and not worry about the OS itself.

3 Likes