Help with booting Kicksecure on HEADS (coreboot) bios

Heads has many boot comparability issues:

heads is:

I don’t like this workaround because it hooks into the initrd generation process and adds more complexity.

Quote initrd/kernel packed in ISO doesn't support exfat (#20621) · Issues · tails / tails · GitLab

Also, I would like to raise concerns on often changing used distro signing key, which is really fast paced for Heads downstream forks which provide 1 release a year (and your distro signing key that will expire in 272 days, which will cause problems for next firmware releases validating iso against detached signature and distro key fused in firmware).

2 Likes