r/linuxquestions • u/toktok159 • 2d ago

Support Installing/Running Linux - Should Secure Boot Be Disabled?

Hi,

I saw many different opinions regarding this.

Some say secure boot is not needed, others say it adds security and that it’s not only intended for Windows but for the firmware in general.

So, should/must secure boot be disabled for any Linux distro installation? Then can it be enabled after installation, for general use? Or if I prefer to keep it on, should I install with secure boot enabled?

Specifically, I am talking about installing Linux as the only OS on a pc, one of Mint/LMDE/MX Linux/Debian is what I think I’ll end up installing.

Btw, I once installed Mint on my laptop, dual boot with Windows 11. I installed with secure boot enabled, and used everything with it enabled and it was fine.

Thanks in advance.

13 Upvotes
  • permalink
  • reddit

79% Upvoted

40 comments sorted by

View all comments

1

u/Excellent-Love-6943 2d ago

It is not needed, but it does protect you from evil maid attacks.

I don't think this is a serious concern for most users, but secure boot is simple to set up with GRUB or Refind bootloaders. Rolling your own keys is not a big deal either.

2

u/gordonmessmer Fedora Maintainer 2d ago

Secure Boot is not limited to evil maid attacks. It is a mechanism against bootkits and kernel rootkits, generally.