| With LinuxBoot you can use any filesystem that Linux supports, not just FAT. You can update boot entries by editing shell scripts, rather than manipulating opaque NVRAM variables. You can run Linux applications straight from the ROM if you want to do that. You can avoid legacy partitions entirely and use LVM for flexible volume management. And... You can build it yourself and verify that the reproducible build matches what others have built to ensure that the firmware is clean. You can have the firmware attest to you via TOTP that it hasn't been changed. You can have a fully encrypted disk, with secrets sealed in the TPM and only unsealed if the firmware is unmodified. You can include device drivers for things that UEFI doesn't support. You can use external hardware tokens like a Yubikey to sign the OS install and have the firmware validate the GPG signature. Or what ever else you might want to do... |