secureboot 开源项目推荐（68 个）

TechUnRestricted /WinDiskWriter

适用于 macOS 的 Windows 可启动 USB 制作工具。修补 Windows 11 以绕过 TPM 和 Secure Boot 要求。支持 UEFI 和 Legacy。

Foxboron /sbctl

安全启动密钥管理器。

ipxe /ipxe

iPXE网络引导加载程序

linuxmobile /shin

A study in structural evolution. An elegant NixOS environment designed to move with the rhythm of your creative core.

ValdikSS /Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot

GrapheneOS /Auditor

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

pbatard /Mosby

Mosby – More Secure Secure Boot

noahbliss /mortar

Framework to join Linux's physical security bricks.

GrapheneOS /AttestationServer

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

joelmathewthomas /archinstall-luks2-lvm2-secureboot-tpm2

A complete Arch Linux installation guide with luks2 full disk encryption, and logical volumes with lvm2, and added security using secure boot and tpm2 luks key enrollment for auto unlocking encrypted root.

Winterkeep /T480-OC

OpenCore 0.6.9 configuration for T480. Optimized for Catalina and Big Sur.

garlin-cant-code /SecureBoot-CA-2023-Updates

PowerShell scripts for checking and applying Secure Boot CA 2023 updates for Windows.

3intermute /ramiel

uefi diskless persistence technique + OVMF secureboot bypass

haz-ard-9 /Windows-vSphere-VMs-Bulk-Secure-Boot-2023-Certificate-Remediation

对VMware vSphere 8虚拟机上Windows Secure Boot 2023证书转移进行批量评估和修复。通过ESXi P09静默路径或SetupMode退回（仅支持方法模式）部署和PK注册。支持BitLocker，可选地在更改前进行快照，并包含回滚、快照和NVRAM清理模式。

ryanrudolfoba /SecureBootForSteamDeck

This repository contains the instructions on how to generate and install the Platform Key (PK), Key Exchange Key (KEK) and Signature Database (DB) to enable the Secure Boot functionality in Steam Deck.

theo546 /my-arch-setup

A repo that explain how to install Arch Linux featuring encryption, Secure Boot, btrfs and AppArmor.

GrapheneOS-Archive /AttestationSamples

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

dm0- /installer

Secure immutable GNU/Linux distro installer

9001 /asm

scriptable runtime-writable livecd / hardware wrangler

wesmar /UnderVolter

Native UEFI/EFI utility for Intel CPU power management (2nd-15th Gen). Direct MSR/MMIO access for undervolting, power limits, and V/F curves. Features built-in NVRAM patching (CFG/OC Lock) for Plundervolt research and Secure Boot SelfEnroll with embedded root CA. Bare-metal, self-contained, and driven by UnderVolter.ini. No OS required.