惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Jina AI
Jina AI
Apple Machine Learning Research
Apple Machine Learning Research
宝玉的分享
宝玉的分享
M
MIT News - Artificial intelligence
S
SegmentFault 最新的问题
博客园 - 叶小钗
量子位
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
酷 壳 – CoolShell
酷 壳 – CoolShell
博客园 - Franky
博客园 - 司徒正美
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
人人都是产品经理
人人都是产品经理
Hugging Face - Blog
Hugging Face - Blog
V
Visual Studio Blog
阮一峰的网络日志
阮一峰的网络日志
博客园 - 【当耐特】
Google DeepMind News
Google DeepMind News
L
LangChain Blog
Stack Overflow Blog
Stack Overflow Blog
博客园_首页
U
Unit 42
月光博客
月光博客
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC

Arch Linux Forums

Avidemux crashes without strace / Applications & Desktop Environments how to apply patches with non-linux linends / Newbie Corner Replicating CachyOS on vanilla Arch (or at least getting close) / Arch Discussion What's arch linux GUI package manager ? / Newbie Corner Hibernation failing due to insufficient memory / System Administration profiledef.sh editting question / Installation trying to script kde plasma wallpaper settings / Programming & Scripting Looking for new Audacious package maintainer / Creating & Modifying Packages issues installing arch with LUKS2 encryption / Newbie Corner QEMU PXE booting does not work with OVMF.4m.fd / Applications & Desktop Environments Wired lan regular disconnect / Newbie Corner Need Help setting up ARCH in my G16 G634JZR iwlwifi started failing consistently, trying to determine root cause Windows randomly jumping between monitors after GNOME 50 update No display via DP or HDMI after boot. / Kernel & Hardware how to change acpi platform_profile? / Newbie Corner Linux denied all kernel modules which not loaded right now Use iPhone as Webcam for Arch Linux Video Output Failure on nvidia-580xx-dkms on TTY --> Desktop switch (Page 2) / Kernel & Hardware I was going to rant ..WINE32 Sabotage compliments of Arvind Krishna / Arch Discussion [SOLVED] LUKS drive auto unlocked by TPM when expected not to / Networking, Server, and Protection Hibernate/suspend from X = dark panel; from TTY = works (ASUS G14, hyb (Page 2) / Laptop Issues Headphone jack noise/buzz / Newbie Corner segmentation fault in cc1plus when building CLK / AUR Issues, Discussion & PKGBUILD Requests Console alternative to meld / GNU/Linux Discussion Problem with paru git clone / Newbie Corner XKB questions / Applications & Desktop Environments gnome-keyring-daemon is not working correctly / Applications & Desktop Environments [SOLVED] Steam opens and immediately closes constantly / Newbie Corner Firefox rounded edges on Sway / Applications & Desktop Environments
Boot loaders for Unified Kernel Images / Newbie Corner
V1del · 2026-06-26 · via Arch Linux Forums

#1 Today 14:44:46

jwodder
Member
Registered: 2026-05-14
Posts: 16

Boot loaders for Unified Kernel Images

When creating a Unified Kernel Image for use with Secure Boot, you have a choice of including a boot loader/manager like systemd-boot or creating a UKI without a booloader that boots directly from UEFI.  However, I can't figure out what exactly the practical differences are that would motivate someone to pick one over the other.

As far as I can tell, the pros of using systemd-boot for this are:

  • You get a boot manager, which lets you choose whether to boot normally, boot other OSes on the disk, reboot into firmware, and some other options.
     

    • ... but seeing as Secure Boot prevents kernel parameters from being set at runtime, will all of the options work?

While the pros of booting directly from UEFI are:

  • Fewer files in the EFI system partition to worry about keeping secure

  • Less stuff you have to configure

What pros, cons, and other considerations am I missing?

#2 Today 14:58:38

Lone_Wolf
Administrator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 15,139

Re: Boot loaders for Unified Kernel Images

There are more bootloaders that support UKI and grub even supports SB.

Separate UKI and SB , then decide whether you want to use SB or not.

Hints
Unless you remove platform keys it's not you who controls SB
For a system that needs to be locked down (disallow changes) SB is one of the possible measures


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

#3 Today 15:06:17

jwodder
Member
Registered: 2026-05-14
Posts: 16

Re: Boot loaders for Unified Kernel Images

Lone_Wolf wrote:

Separate UKI and SB , then decide whether you want to use SB or not.

But my question is: *How* do I decide whether to use systemd-boot or not?  What factors are there that should inform my decision?

#4 Today 15:35:39

V1del
Forum Moderator
Registered: 2012-10-16
Posts: 25,255

Re: Boot loaders for Unified Kernel Images

I think Lone_Wolf is talking about Secure Boot in his abbreviation.

As for the bootloader, this is mostly preferences and you already listed the relevant differences. Afaik secure boot should not prevent kernel parameters at runtime assuming you are actually using a bootloader, because the bootloader is signed as well and whatever it passes to the kernel is considered "safe".

FWIW e.g. I use GRUB because I want to be able to load kernels from my root partition directly and I don't trust VFAT stability to keep kernel integrity safe (e.g. it's far more likely you have a corrupted kernel if you had a unsafe shutdown after an update involving the kernel on VFAT than on a proper filesystem). Other than that this is really just up to preferences and if you have a big enough VFAT partition and trust it enough there will not be that much inherent difference