惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

N
News | PayPal Newsroom
P
Proofpoint News Feed
Cyberwarzone
Cyberwarzone
C
Cisco Blogs
SecWiki News
SecWiki News
Know Your Adversary
Know Your Adversary
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
Vercel News
Vercel News
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
罗磊的独立博客
NISL@THU
NISL@THU
WordPress大学
WordPress大学
Hacker News - Newest:
Hacker News - Newest: "LLM"
T
Threat Research - Cisco Blogs
AI
AI
Simon Willison's Weblog
Simon Willison's Weblog
Security Archives - TechRepublic
Security Archives - TechRepublic
有赞技术团队
有赞技术团队
L
LINUX DO - 热门话题
Hacker News: Ask HN
Hacker News: Ask HN
V
V2EX
G
GRAHAM CLULEY
TaoSecurity Blog
TaoSecurity Blog
Hugging Face - Blog
Hugging Face - Blog
D
Darknet – Hacking Tools, Hacker News & Cyber Security
F
Fortinet All Blogs
博客园 - 叶小钗
博客园 - 三生石上(FineUI控件)
云风的 BLOG
云风的 BLOG
Recorded Future
Recorded Future
Latest news
Latest news
The Hacker News
The Hacker News
aimingoo的专栏
aimingoo的专栏
T
Troy Hunt's Blog
S
Schneier on Security
I
Intezer
Google DeepMind News
Google DeepMind News
A
Arctic Wolf
Apple Machine Learning Research
Apple Machine Learning Research
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
T
Threatpost
爱范儿
爱范儿
The Register - Security
The Register - Security
S
SegmentFault 最新的问题
Blog — PlanetScale
Blog — PlanetScale
博客园 - 聂微东
宝玉的分享
宝玉的分享
Recent Commits to openclaw:main
Recent Commits to openclaw:main
美团技术团队
B
Blog RSS Feed

Arch Linux Forums

Avidemux crashes without strace / Applications & Desktop Environments how to apply patches with non-linux linends / Newbie Corner Replicating CachyOS on vanilla Arch (or at least getting close) / Arch Discussion What's arch linux GUI package manager ? / Newbie Corner Hibernation failing due to insufficient memory / System Administration profiledef.sh editting question / Installation trying to script kde plasma wallpaper settings / Programming & Scripting Looking for new Audacious package maintainer / Creating & Modifying Packages issues installing arch with LUKS2 encryption / Newbie Corner QEMU PXE booting does not work with OVMF.4m.fd / Applications & Desktop Environments Wired lan regular disconnect / Newbie Corner Need Help setting up ARCH in my G16 G634JZR iwlwifi started failing consistently, trying to determine root cause Windows randomly jumping between monitors after GNOME 50 update No display via DP or HDMI after boot. / Kernel & Hardware how to change acpi platform_profile? / Newbie Corner Linux denied all kernel modules which not loaded right now Use iPhone as Webcam for Arch Linux Video Output Failure on nvidia-580xx-dkms on TTY --> Desktop switch (Page 2) / Kernel & Hardware I was going to rant ..WINE32 Sabotage compliments of Arvind Krishna / Arch Discussion [SOLVED] LUKS drive auto unlocked by TPM when expected not to / Networking, Server, and Protection Hibernate/suspend from X = dark panel; from TTY = works (ASUS G14, hyb (Page 2) / Laptop Issues Headphone jack noise/buzz / Newbie Corner segmentation fault in cc1plus when building CLK / AUR Issues, Discussion & PKGBUILD Requests Console alternative to meld / GNU/Linux Discussion Problem with paru git clone / Newbie Corner XKB questions / Applications & Desktop Environments gnome-keyring-daemon is not working correctly / Applications & Desktop Environments [SOLVED] Steam opens and immediately closes constantly / Newbie Corner Firefox rounded edges on Sway / Applications & Desktop Environments on Linux arch 7.0.10-arch1-1 connection drops / Networking, Server, and Protection GDM does not open login screen after update / Newbie Corner Cinnamon (X11) fails to load after update (Page 2) / Applications & Desktop Environments fontconfig-2:2.18.x - broken fonts? (Page 2) / Applications & Desktop Environments Bluetooth headphones connect but don't auto-switch (alsa 1.2.16) / Multimedia and Games Audio breaks after every suspend/change of VT (Page 2) / Newbie Corner EFI stub: Warning: unable to unprotect memory range (Page 3) / Kernel & Hardware Keyboard problem with the french disposition / Newbie Corner Working with two network interfaces / Networking, Server, and Protection [SOLVED] Power spikes on laptop / Laptop Issues Problems with Qt? (Page 2) / Applications & Desktop Environments plasmashell 6.6.5 crashing on loop / Applications & Desktop Environments I'm worried / Newbie Corner Help! RTL8723BS "coalesce failed with error -22" after upgrade / Laptop Issues System notifications not working on any browser / Applications & Desktop Environments installing kernels with kernel-install / Community Contributions [SOLVED] Intel AX210 issue on linux=7.0.10 / Kernel & Hardware No longer booting after Windows 11 update / Installation *SOLVED* Two PC's but different boot times - Kernel 7.0? / Kernel & Hardware gnome-shell continuous clutter_input_focus_set_cursor_location msg / Pacman & Package Upgrade Issues google-chrome, vscode and spotify are ignore my fontconfig / Applications & Desktop Environments KDE6 Akonadi default database backend / Creating & Modifying Packages Support / Routing quirks for new Creative Sound Blaster AE-X (USB ID 0 / Kernel & Hardware Kernel Panic and system freezes with 4x16 DDR5 / Kernel & Hardware dm-crypt and SSDs / Newbie Corner Problems with Worms WMD / Newbie Corner Freeze after login whenever upgrading nvidia/kernel / Laptop Issues Blender crashes on startup when using Vulkan backend / Applications & Desktop Environments Top 5 MDM Solutions for Linux Devices in 2026 Elden Ring crash in sound initialisation / Multimedia and Games AUR connection issues (EOF/TLS errors) (Page 5) / AUR Issues, Discussion & PKGBUILD Requests GNOME freeze after login / Applications & Desktop Environments Bash is weird now / Newbie Corner Gif as KDE avatar / Applications & Desktop Environments Export in musescore / Applications & Desktop Environments Nvidia And Amd Drivers / Applications & Desktop Environments [SOLVED] How to get pavucontrol in dark mode? / Newbie Corner Startx does not work / Applications & Desktop Environments Coturn server installtaion / Applications & Desktop Environments Could not resolve Matrix-synapse dependency error / Applications & Desktop Environments Possible solution for mesa-amber build failure with glibc-2.43 / Multimedia and Games [SOLVED] Plymouth forces English (US) layout on boot / Newbie Corner [Solved]What should I use as license if the upstream repo has none? / AUR Issues, Discussion & PKGBUILD Requests The Official Hello Everyone Thread (Page 334) / Newbie Corner [SOLVED] EPSON ET-2710 printer only printing blank pages / Newbie Corner [SOLVED]Session crashes after login, booted back to sddm / Laptop Issues [SOLVED] Asus monitor suspend results in on/off cycling / Newbie Corner Ultrahuman Discount Code [SAVEULTRA] 10% Off For Existing Customers / Creating & Modifying Packages Ultrahuman Discount Code [SAVEULTRA] 10% Off – Verified Coupon for Exi / Arch Discussion New Ultrahuman Discount Code [SAVEULTRA] 2026 – Get 20% Extra OffToday / Programming & Scripting Ultrahuman Discount Code 2026 - "SAVEULTRA" - Get 20% Extra Off / Newbie Corner Sway keybinding stops working after sleep / Applications & Desktop Environments QEMU SPICE how to achieve bidirectional clipboard with Sway? / Applications & Desktop Environments Apollo Neuro Promo Code [APOLLOZEN] $99 Off Legit Or Just Marketing Apollo Neuro Discount Code $99 Off [APOLLOZEN] Secret Savings Trick HTTP session disconnect on WI-FI disconnect / Networking, Server, and Protection [SOLVED] Cannot chain-load into Windows with GRUB. / Newbie Corner [SOLVED] Font hinting appears to be disabled on Qt6 applications? / Applications & Desktop Environments Black screen after waking up from sleep/hybernate/suspend. / Newbie Corner Diskless booting failing, ipconfig no devices to configure / Kernel & Hardware Strange Font Issue Across System / Newbie Corner [SOLVED] Laptop doesn't wake from sleep on NVIDIA 595.71.05 drivers / Newbie Corner Touchpad randomly stops moving (clicks still work) on Hyprland / Laptop Issues Random hangs on Ryzen Mobile after 6.18.13 ? / Kernel & Hardware [SOLVED] Can't get IP address for USB Ethernet device (KORG Wavestate) / Networking, Server, and Protection Laptop display does not turn on after being off for around 50 min / Multimedia and Games Text Corruption in GPU Screen Recorder GUI / Applications & Desktop Environments Mouse not correctly recognized during boot (Page 2) / Kernel & Hardware PKGBUILD review / AUR Issues, Discussion & PKGBUILD Requests Touchpad not working / Newbie Corner
Boot loaders for Unified Kernel Images / Newbie Corner
V1del · 2026-06-26 · via Arch Linux Forums

#1 Today 14:44:46

jwodder
Member
Registered: 2026-05-14
Posts: 16

Boot loaders for Unified Kernel Images

When creating a Unified Kernel Image for use with Secure Boot, you have a choice of including a boot loader/manager like systemd-boot or creating a UKI without a booloader that boots directly from UEFI.  However, I can't figure out what exactly the practical differences are that would motivate someone to pick one over the other.

As far as I can tell, the pros of using systemd-boot for this are:

  • You get a boot manager, which lets you choose whether to boot normally, boot other OSes on the disk, reboot into firmware, and some other options.
     

    • ... but seeing as Secure Boot prevents kernel parameters from being set at runtime, will all of the options work?

While the pros of booting directly from UEFI are:

  • Fewer files in the EFI system partition to worry about keeping secure

  • Less stuff you have to configure

What pros, cons, and other considerations am I missing?

#2 Today 14:58:38

Lone_Wolf
Administrator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 15,139

Re: Boot loaders for Unified Kernel Images

There are more bootloaders that support UKI and grub even supports SB.

Separate UKI and SB , then decide whether you want to use SB or not.

Hints
Unless you remove platform keys it's not you who controls SB
For a system that needs to be locked down (disallow changes) SB is one of the possible measures


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

#3 Today 15:06:17

jwodder
Member
Registered: 2026-05-14
Posts: 16

Re: Boot loaders for Unified Kernel Images

Lone_Wolf wrote:

Separate UKI and SB , then decide whether you want to use SB or not.

But my question is: *How* do I decide whether to use systemd-boot or not?  What factors are there that should inform my decision?

#4 Today 15:35:39

V1del
Forum Moderator
Registered: 2012-10-16
Posts: 25,255

Re: Boot loaders for Unified Kernel Images

I think Lone_Wolf is talking about Secure Boot in his abbreviation.

As for the bootloader, this is mostly preferences and you already listed the relevant differences. Afaik secure boot should not prevent kernel parameters at runtime assuming you are actually using a bootloader, because the bootloader is signed as well and whatever it passes to the kernel is considered "safe".

FWIW e.g. I use GRUB because I want to be able to load kernels from my root partition directly and I don't trust VFAT stability to keep kernel integrity safe (e.g. it's far more likely you have a corrupted kernel if you had a unsafe shutdown after an update involving the kernel on VFAT than on a proper filesystem). Other than that this is really just up to preferences and if you have a big enough VFAT partition and trust it enough there will not be that much inherent difference