https://bitlex.li/tags/archlinux/Recent content in Archlinux on Learning Journey of Alexander AllgäuerHugoen-usTue, 14 Apr 2026 00:00:00 +0000https://bitlex.li/tutorials/secureboot-arch-linux/Tue, 14 Apr 2026 00:00:00 +0000https://bitlex.li/tutorials/secureboot-arch-linux/<p>Configuration Guide for Secure Boot ArchLinux.</p> <h2 id="update-bios">Update Bios</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>fwupdmgr refresh </span></span><span style="display:flex;"><span>fwupdmgr refresh </span></span><span style="display:flex;"><span>fwupdmgr get-updates </span></span><span style="display:flex;"><span>fwupdmgr update </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sbctl status </span></span><span style="display:flex;"><span>*** </span></span><span style="display:flex;"><span>*Setup Mode: X Disabled </span></span><span style="display:flex;"><span>*Secure Boot: X Disabled </span></span><span style="display:flex;"><span>*** </span></span></code></pre></div><p>In BIOS delete your PlatformKeys to get into setupMode.</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sbctl status </span></span><span style="display:flex;"><span>*** </span></span><span style="display:flex;"><span>*Setup Mode: ✓ Enabled </span></span><span style="display:flex;"><span>*Secure Boot: X Disabled </span></span><span style="display:flex;"><span>*** </span></span></code></pre></div><p>@slexi  sudo sbctl create-keys Created Owner UUID 636e0dc7-096e-4e10-8f7f-831dfa8b5b97 ✓ Secure boot keys created!</p> <p>@slexi  sudo sbctl enroll-keys ‼ File is immutable: /sys/firmware/efi/efivars/KEK-8be4df61-93ca-11d2-aa0d-00e098032b8c ‼ File is immutable: /sys/firmware/efi/efivars/db-d719b2cb-3d3a-4596-a3bc-dad00e67656f You need to chattr -i files in efivarfs</p>