Linux Gaming

20598 readers

424 users here now

Discussions and news about gaming on the GNU/Linux family of operating systems (including the Steam Deck). Potentially a $HOME away from home for disgruntled /r/linux_gaming denizens of the redditarian demesne.

This page can be subscribed to via RSS.

Original /r/linux_gaming pengwing by uoou.

No memes/shitposts/low-effort posts, please.

Resources

WWW:

Discord:

IRC:

Gaming on Linux

Matrix:

Telegram:

Gaming on Linux

founded 2 years ago

MODERATORS

monolalia@lemmy.world

Is secure boot actually bad ? (sh.itjust.works)

submitted 3 days ago by bridgeenjoyer@sh.itjust.works to c/linux_gaming@lemmy.world

42 comments fedilink hide all child comments

Id like to hear thoughts. Of course us gamers hate kernel level anti cheat, but is that actually tied to secureboot?

I know some/most distros can boot in secure mode, so it doesn't seem like an issue there.

With all the new games moving to it, looks like we will all have to sit them out or install Spyware (microshit) to play. I will opt not to.

you are viewing a single comment's thread
view the rest of the comments

[–] that_leaflet@lemmy.world 27 points 3 days ago (2 children)

For Linux, the protection is weak.

But if properly implemented, it’s good. But it would be a hassle to do and would require users to register new keys and blacklist Microsoft’s.

Measured boot is a better solution for Linux. It’s decentralized and does not rely on Microsoft. It uses the TPM to “measure” various parts of the UEFI, bootloader, and OS to ensure they have not been tampered with.

[–] lemonskate@lemmy.world 8 points 3 days ago (1 children)

Measured boot requires secure boot to be enabled as one of its components.

The real value of measured boot is when paired with full disk encryption as it protects against boot loader attacks that can compromise your sealed keys.

[–] that_leaflet@lemmy.world 3 points 3 days ago

I don't believe that's the case, according to Aeon. The state of secure boot can be measured, so if you have it enabled/disabled, you have to keep it that way or else the measurement will fail and the TPM will complain.

[–] naeap@sopuli.xyz 4 points 3 days ago (1 children)

Never heard of that

Does "every" modern BIOS support that?
Need to read up on it...

[–] that_leaflet@lemmy.world 12 points 3 days ago* (last edited 3 days ago) (2 children)

No, it requires a TPM2 chip. So the requirements for measured boot are to similar to Windows 11.

Poettering has a few blog posts and conference videos on it. And Aeon is a distro that implements measured boot as the default.

[–] sugar_in_your_tea@sh.itjust.works 8 points 3 days ago (1 children)

I use Aeon on my laptop, and I will say there are usability issues, but hopefully the kinks get worked out. Since installing in March, I've had to enter my recovery key and reenroll three times due to some kind of firmware update. This is on an older laptop (Ryzen 3500U), so I don't know if it's a common issue or unique to me.

Anyway, it's a cool idea, I hope it gets more attention. The benefits for regular users are fairly minimal, but I certainly appreciate security for security's sake.

[–] naeap@sopuli.xyz 1 points 3 days ago (1 children)

Thanks!

That's good to know.
As I need my laptop for work, I can't really risk such experiments...

[–] sugar_in_your_tea@sh.itjust.works 2 points 3 days ago

Yeah, mine is just for mucking around at home. I mostly browse the web and play casual games. Nothing important is stored there, so if I need to reinstall, then so be it.

[–] naeap@sopuli.xyz 1 points 3 days ago

Ah, ok, gotcha.
Thanks for the input!