shrewd finch
Hey I tried secureblue for sometime but I do not know if it is compatible for Asus ROG Zephyrus G14.
I can follow this guide -
https://asus-linux.org/guides/fedora-silverblue-guide/
but can anyone please confirm that this guide will work on secureblue because I am not sure about it?
Or does anyone having same laptop with secureblue help.
wind cipher
I'm not familiar with that device myself but if Fedora Silverblue works on it then I don't see any reason why secureblue wouldn't.
A few modifications to the guide though:
run0 instead of sudo.Replace Firefox RPM with Flathub Flatpak
this is bad advice from a security standpoint, don't do that
(and anyway Trivalent is the recommended browser for security on secureblue)
shrewd finch
I had another doubt that in secureblue documentation it is mentioned that ->
nvidia-open images are recommended for systems with NVIDIA GPUs Turing or newer (GTX 16XX+, RTX 20XX+).
I had heard that Nvidia closed sourced drivers provides better performance.
keen hollow
I had another doubt that in secureblue documentation it is mentioned that ->
nvi...
the nvidia-open drivers are made by Nvidia, have good performance, and have some open-source components
it isn't the same as nouveau, which are the community open source drivers which have poor performance
the old nvidia closed driver will be phased out eventually https://developer.nvidia.com/blog/nvidia-transitions-fully-towards-open-source-gpu-kernel-modules
For newer GPUs from the Turing, Ampere, Ada Lovelace, or Hopper architectures, NVIDIA recommends switching to the open-source GPU kernel modules.
wind cipher
A few modifications to the guide though:
* Use `run0` instead of `sudo`.
oh or actually for editing a file as root, you can use run0edit, so like
run0edit /etc/yum.repos.d/asus.repo
this is like sudoedit but using run0 instead of sudo as the backend, so you're editing a temporary file as an unprivileged user, and then it copies the contents to the target location when you're done editing
shrewd finch
Thankyou Alex and Amaranth for explaining.
Now I will start installing secureblue on laptop
I am trying dual booting with Windows with secureboot turned on.
This should work, right?
wind cipher
eh... from what I've heard, dual booting Windows with any other system can be a little complicated
in particular I'd recommend installing secureblue with a separate EFI system partition from the one Windows uses, not trying to have both boot from the same EFI system partition
because Windows will sometimes overwrite other systems' boot data if they share a boot partition
shrewd finch
Should i encrypt secureblue?
wind cipher
it's good practice to encrypt the main partition yeah (not the boot partitions, there's no personal data there)
just the standard LUKS encryption the installer sets up is fine
also just keep in mind the usual caveat that if you forget the encryption password, there's no recovering the data on it
shrewd finch
just the standard LUKS encryption the installer sets up is fine
Does installer give option to leave boot partition out of encryption
wind cipher
the installer doesn't encrypt the boot partitions by default, I was just mentioning that in case you were doing manual partitioning or something
shrewd finch
Oh I understand.