Linux command
limine-enroll-config 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Embed
limine-enroll-config [path/to/BOOTX64.EFI] [blake2b_hash]
Remove
limine-enroll-config --reset [path/to/BOOTX64.EFI]
Example
limine-enroll-config --help
说明
limine-enroll-config embeds or resets the BLAKE2B hash of a Limine configuration file (limine.conf) into the Limine EFI executable. This ensures the bootloader configuration has not been tampered with when Secure Boot is enabled. When Secure Boot validates the signed Limine executable, the embedded hash is used to verify the configuration file's integrity before applying boot settings. If the hash doesn't match, Limine will refuse to load the configuration.
参数
- --reset
- Remove the enrolled configuration hash from the EFI executable
- --help
- Display help information
- _EFI_FILE_
- Path to the Limine UEFI executable (e.g., BOOTX64.EFI)
- _HASH_
- The BLAKE2B hash of the limine.conf configuration file
FAQ
What is the limine-enroll-config command used for?
limine-enroll-config embeds or resets the BLAKE2B hash of a Limine configuration file (limine.conf) into the Limine EFI executable. This ensures the bootloader configuration has not been tampered with when Secure Boot is enabled. When Secure Boot validates the signed Limine executable, the embedded hash is used to verify the configuration file's integrity before applying boot settings. If the hash doesn't match, Limine will refuse to load the configuration.
How do I run a basic limine-enroll-config example?
Run `limine-enroll-config [path/to/BOOTX64.EFI] [blake2b_hash]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does --reset do in limine-enroll-config?
Remove the enrolled configuration hash from the EFI executable