diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-11 20:28:03 +0200 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2026-10-19 15:13:36 +0000 |
| commit | 8a2869bd1619e59cff40a905c3c274d5d6e419a2 (patch) | |
| tree | c8f7647bed034c7a27a70e2323191f65dd02e4ad /docs | |
| parent | 0aee207d65d88ac7b28a922ed5a6ec11a5723386 (diff) | |
| download | vyos-documentation-8a2869bd1619e59cff40a905c3c274d5d6e419a2.tar.gz vyos-documentation-8a2869bd1619e59cff40a905c3c274d5d6e419a2.zip | |
T861: secure-boot: document show secure-boot op-mode commands
Add an Operation section with {opcmd} entries for 'show secure-boot' and 'show
secure-boot detail', and reference it from the installation verification step.
(cherry picked from commit 8a30d067745b07146768fd4e1e428cdf98c6407c)
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/installation/secure-boot.md | 36 |
1 files changed, 29 insertions, 7 deletions
diff --git a/docs/installation/secure-boot.md b/docs/installation/secure-boot.md index ecbc432d..3cadd4f5 100644 --- a/docs/installation/secure-boot.md +++ b/docs/installation/secure-boot.md @@ -95,13 +95,9 @@ Now reboot and re-enable UEFI Secure Boot. :alt: Disable UEFI secure boot ::: -VyOS will now launch in UEFI Secure Boot mode. You can verify this by running -one of the following commands: - -```none -vyos@vyos:~$ show secure-boot -SecureBoot enabled -``` +VyOS will now launch in UEFI Secure Boot mode. You can verify this with +{opcmd}`show secure-boot` (see [Operation](#secure-boot-operation)) or by +running one of the following commands: ```none vyos@vyos:~$ show log kernel | match Secure @@ -179,6 +175,32 @@ service` This prevents loading any malicious code after the image is assembled into the Kernel as a module. You can disable this behavior on custom builds if needed. +(secure-boot-operation)= + +## Operation + +```{opcmd} show secure-boot + +Show whether the system was booted with UEFI Secure Boot enabled. + +:::{code-block} none +vyos@vyos:~$ show secure-boot +SecureBoot enabled +::: +``` + +```{opcmd} show secure-boot detail + +Show the issuer and subject of the certificate used to sign the running +Linux Kernel. + +:::{code-block} none +vyos@vyos:~$ show secure-boot detail +Issuer: /CN=VyOS Networks Secure Boot CA +Subject: /CN=VyOS Networks Secure Boot Signer 2025 - linux +::: +``` + ## Troubleshoot In most cases, if something goes wrong during system boot, you'll see this |