Scripts to slightly improve the security of the Linux boot process with UEFI Secure Boot and TPM support
Safe Boot has four goals to improve the safety of booting Linux on normal laptops:
The slightly more secure Heads firmware (built with coreboot) is a better choice for user freedom since it replaces the proprietary firmware with open source, while Safe Boot's objective is to work with existing commodity hardware and UEFI SecureBoot mechanisms, as well as relatively stock Linux distributions.
For more details, see the docs directory, which is processed with mkdocs-material to produce the https://safeboot.dev/ website.
mkdir debian ; cd debian git clone https://github.com/osresearch/safeboot cd safeboot sudo make requirements make package
safeboot
Please create issues on github if you run into problems and pull requests to solve problems or add features are welcome! Please review the contributors guidelines and code of conduct for more details on contributing.