Follow
@DrWhax@mastodon.social the rest of the tooling around Qubes and UEFI SecureBoot isn't really in place yet, so you will have to do upgrades by hand right now to enroll your platform key and sign the unified images from the dom0.
@DrWhax@mastodon.social the rest of the tooling around Qubes and UEFI SecureBoot isn't really in place yet, so you will have to do upgrades by hand right now to enroll your platform key and sign the unified images from the dom0.
@DrWhax@mastodon.social oh, and if you want to use a Yubikey or hardware token, it needs to be available as a CCID to the dom0, or you need to do build signing in a separate qube and copy the unified image into the dom0 for installation in the UEFI `/boot` partition.