postmarketOS

220 readers

1 users here now

postmarketOS - a real Linux distribution for phones and other mobile devices 🐧 📱 👩‍💻

Rules:

Be nice, follow CoC
Don’t ask for device ports, consider DIY
Report bugs in the issue tracker (not here! 🐛)

See also:

founded 9 months ago

MODERATORS

JustSoup321@lemmy.world

ollieparanoid@lemmy.world

achill@lemmy.world

PureTryOut@lemmy.world

Locking the bootloader (sh.itjust.works)

submitted 1 week ago by med@sh.itjust.works to c/postmarketos@lemmy.world

10 comments fedilink hide all child comments

I've been looking through the documentation and installation guides for PostmarketOS, and I've noticed there seems to be no mention of locking the bootloader after flashing.

Is that because there's no issue with doing so, or because you can't?

I'm looking at installing on a Fairphone 5, but anyone with any device that's able to share their experience would be appreciated.

you are viewing a single comment's thread
view the rest of the comments

[–] moonpiedumplings@programming.dev 6 points 1 week ago (1 children)

Only pixels let you relock the bootloader after flashing.

Frustratingly, grapheneos only supports pixels because of that.

[–] erebion@news.erebion.eu 1 points 1 week ago* (last edited 1 week ago) (1 children)

That's just plain wrong. Some others also allow it, for example: you could lock a Fairphone.

[–] med@sh.itjust.works 1 points 1 week ago (1 children)

After installing a different os? So if I installed PostmarketOS, could I lock the bootloader? After looking in to it more, it seems like a pretty clear no.

[–] erebion@news.erebion.eu 2 points 1 week ago (1 children)

postmarketOS does not seem to have implemented Android Verified Boot yet and I am not aware of Linux distros that do it.

Have a look at iodéOS, CalyxOS, GrapheneOS if you want that, at least for now.

[–] med@sh.itjust.works 1 points 1 week ago* (last edited 1 week ago) (1 children)

I have Graphene, and I'll be sticking with it for now.

I think my next step will have to be getting involved with implementing verified boot, because unless every phone suddenly starts shipping with TPMs and open bootloaders, I won't ever be able to switch.

Finding a starting point is half the battle I guess!

[–] erebion@news.erebion.eu 2 points 1 week ago

There's definitely enough to do, so if you want to contribute in that area, it'd be MUCH appreciated. :)