[CentOS-devel] Secure boot for CentOS Stream 10 (and soon 9)

Hi everyone,

CentOS Stream 10 now has a working secure boot!

This shim-15.8-5.el10 build enabled it earlier this week: https://kojihub.stream.centos.org/koji/buildinfo?buildID=79665

For that to work, the unsigned shim first had to go through a community review: https://github.com/rhboot/shim-review/issues/454 and after that get signed by Microsoft.

The signed shim is now available on the mirrors.

I'd like to thank Fabian Arrotin for pushing this through and testing, Marta Lewandowska for helping with the review and organization, Nicolas Frayer for all the packaging work, Peter Jones for handling the signing, and Brian Stinson for submitting the initial review.

CentOS Stream 9 should have it in the following weeks as well.

Cheers, Adam