UEFI and dual-boot?

What's the current state of dual booting (particularly Debian (Wheezy) and Win8) on UEFI ("Secure" boot) PCs? In particular, with say a Toshi L850/046 with Win8, can I reasonably expect success shrinking the existing partition and installing Debian in a separate partition and ending up with a workable dual-boot system? Pointers to HOWTOs etc gratefully accepted (I've searched, but didn't come up with much yet, apart from the discussion here in early Jan and an article on Matthew Garrett's Shim[1]). Thanks, Neale. [1] http://www.zdnet.com/shimming-your-way-to-linux-on-windows-8-pcs-7000008246/

Neale Banks <neale@lowendale.com.au> wrote:
What's the current state of dual booting (particularly Debian (Wheezy) and Win8) on UEFI ("Secure" boot) PCs?
As far as I know from articles that I've read, Debian don't yet offer a means of booting with "secure boot" enabled. However, any machine that complies with Microsoft's guidelines is required to provide an option to disable secure boot, so that any desired boot loader can be invoked (again according to information from sources that I trust on the matter).

Neale Banks <neale@lowendale.com.au> wrote:
What's the current state of dual booting (particularly Debian (Wheezy) and Win8) on UEFI ("Secure" boot) PCs?
As far as I know from articles that I've read, Debian don't yet offer a means of booting with "secure boot" enabled. However, any machine that complies with Microsoft's guidelines is required to provide an option to disable secure boot, so that any desired boot loader can be invoked (again according to information from sources that I trust on the matter).
Matthew Garrett's 'blog is, as usual, a great source of information on this subject. cf., http://mjg59.dreamwidth.org/ -- Lev Lafayette, mobile: 61 432 255 208 http://www.ietf.org/rfc/rfc1855.txt

On 12/02/13 15:46, Neale Banks wrote:
What's the current state of dual booting (particularly Debian (Wheezy) and Win8) on UEFI ("Secure" boot) PCs?
So two major points: 1. Just turn off secure boot, it's such a minimal benefit that turning it off isn't a real security loss. 2. Why are you deal booting? These days choosing a primary OS and just running the other in a VM using something like VMware's "unity" mode that largely merges the OS is a really nice way to do things.

On Tue, 12 Feb 2013, Julien Goodwin wrote:
On 12/02/13 15:46, Neale Banks wrote:
What's the current state of dual booting (particularly Debian (Wheezy) and Win8) on UEFI ("Secure" boot) PCs?
So two major points:
1. Just turn off secure boot, it's such a minimal benefit that turning it off isn't a real security loss.
2. Why are you deal booting? These days choosing a primary OS and just running the other in a VM using something like VMware's "unity" mode that largely merges the OS is a really nice way to do things.
Good points. This system isn't for me. Otherwise I'd just disable secure boot (and re-enable it in the (hopefully rare) occasion of needing it to boot 'doze8). Re the VM option, the "primary OS" is not yet decided - that will come from experience. Hopefully Linux will be used most :-) Hmmm... should I perhaps be thinking more like keeping UEFI enabled (as distinct from "Legacy BIOS") but with "Secure boot" disabled? In particular is that likely to enable us to still boot the (shrunken) 'doze-8 partition and install a new (bootable) Linux partition? Thanks, Neale.

On 14/02/13 22:41, Neale Banks wrote:
On Tue, 12 Feb 2013, Julien Goodwin wrote:
On 12/02/13 15:46, Neale Banks wrote:
What's the current state of dual booting (particularly Debian (Wheezy) and Win8) on UEFI ("Secure" boot) PCs?
So two major points:
1. Just turn off secure boot, it's such a minimal benefit that turning it off isn't a real security loss.
2. Why are you deal booting? These days choosing a primary OS and just running the other in a VM using something like VMware's "unity" mode that largely merges the OS is a really nice way to do things.
Good points.
This system isn't for me. Otherwise I'd just disable secure boot (and re-enable it in the (hopefully rare) occasion of needing it to boot 'doze8).
Windows 8 doesn't require secure boot, and I'm not actually aware of any functionality lost by disabling it.
participants (4)
-
Jason White
-
Julien Goodwin
-
Lev Lafayette
-
Neale Banks