Limine - Revision history

Axodentally: limine moved from codeberg to github

2026-04-17T08:49:47Z

limine moved from codeberg to github

← Older revision		Revision as of 08:49, 17 April 2026
Line 59:		Line 59:
	[[Bootloader]]		[[Bootloader]]

	[https://~~codeberg~~.~~org~~/Limine/Limine Limine ~~Codeberg~~ Repository]		[https://github.com/Limine-Bootloader/Limine Limine GitHub Repository]
	[[Category:Booting]]		[[Category:Booting]]
	[[Category:Secure Boot]]		[[Category:Secure Boot]]

AP767: /* See Also */

2026-02-17T19:14:02Z

AP767: Added a Usage section for installation and configuration of Limine

2026-02-17T19:05:46Z

Added a Usage section for installation and configuration of Limine

← Older revision		Revision as of 19:05, 17 February 2026
Line 1:		Line 1:
	{{expand}}		{{expand}}

	[https://limine-bootloader.org/ '''Limine'''] ([https://www.merriam-webster.com/dictionary/in%20limine lē-mi-ne]) is a modern, advanced, portable, multi-protocol bootloader and boot manager. It aims to be a more robust alternative to bootloaders like [[GNU GRUB]] and [[Systemd/boot\|Systemd-boot]]. ~~It can be configured using the NixOS~~ options ~~under~~		[https://limine-bootloader.org/ '''Limine'''] ([https://www.merriam-webster.com/dictionary/in%20limine lē-mi-ne]) is a modern, advanced, portable, multi-protocol bootloader and boot manager. It aims to be a more robust alternative to bootloaders like [[GNU GRUB]] and [[Systemd/boot\|Systemd-boot]].
	[https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]
			== Usage ==
			To install and enable Limine, add this to your system configuration:
			{{File\|3=<nowiki>
			boot.loader.limine.enable = true;
			</nowiki>\|name=/etc/nixos/configuration.nix\|lang=nix}}
			For additional Limine module configuration options, refer to [https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]

	== Secure Boot ==		== Secure Boot ==

Ben9986: Grammar and wording improvements

2025-12-08T22:48:22Z

Grammar and wording improvements

← Older revision		Revision as of 22:48, 8 December 2025
Line 1:		Line 1:
	{{expand}}		{{expand}}

	[https://limine-bootloader.org/ Limine] ([https://www.merriam-webster.com/dictionary/in%20limine lē-mi-ne]) is a modern, advanced, portable, multi-protocol bootloader and boot manager. It aims to be a more robust alternative to bootloaders like [[GNU GRUB]] and [[Systemd/boot\|Systemd-boot]]. It can be configured using the NixOS options under		[https://limine-bootloader.org/ '''Limine'''] ([https://www.merriam-webster.com/dictionary/in%20limine lē-mi-ne]) is a modern, advanced, portable, multi-protocol bootloader and boot manager. It aims to be a more robust alternative to bootloaders like [[GNU GRUB]] and [[Systemd/boot\|Systemd-boot]]. It can be configured using the NixOS options under
	[https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]		[https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]

Line 16:		Line 16:
	# <code>sbctl</code> is installed as a system level package (using <code>environment.systemPackages</code>).		# <code>sbctl</code> is installed as a system level package (using <code>environment.systemPackages</code>).

	=== Generate Secure Boot ~~Keys~~ ===		=== Generate Secure Boot keys ===
	<code>sbctl</code> is used to securely generate & store the Secure Boot keys. Generating the keys is as ~~easy~~ as:<syntaxhighlight lang="console">		<code>sbctl</code> is used to securely generate & store the Secure Boot keys. Generating the keys is as simple as:<syntaxhighlight lang="console">
	$ sudo sbctl create-keys		$ sudo sbctl create-keys
	</syntaxhighlight>This stores your secure boot keys at <code>/var/lib/sbctl</code> and sets the permissions so that they can only be read by the root user.		</syntaxhighlight>This stores your secure boot keys at <code>/var/lib/sbctl</code> and sets the permissions so that they can only be read by the root user.
Line 29:		Line 29:
	After entering Setup Mode or clearing the keys, reboot back into NixOS.		After entering Setup Mode or clearing the keys, reboot back into NixOS.

	=== Enroll Secure Boot ~~Keys~~ ===		=== Enroll Secure Boot keys ===
	Once in Setup Mode, your generated keys can be enrolled using <code>sbctl</code>. <syntaxhighlight lang="console">		Once in Setup Mode, your generated keys can be enrolled using <code>sbctl</code> again. <syntaxhighlight lang="console">
	$ sudo sbctl enroll-keys --microsoft --firmware-builtin		$ sudo sbctl enroll-keys --microsoft --firmware-builtin
	</syntaxhighlight>The <code>--microsoft</code> option is required for some devices which have hardware OptionROMS signed by Microsoft keys.		</syntaxhighlight>The <code>--microsoft</code> option is required for some devices which have hardware OptionROMS signed by Microsoft keys. The <code>--firmware-builtin</code> option ensures your OEM certificates are also installed.

	If this is successful, you can now rebuild with <code>boot.loader.limine.secureBoot.enable</code> set to true and reboot. Secure Boot should be enabled after reboot, but some devices will require it to be re-enabled manually in the UEFI firmware.		If this is successful, you can now rebuild with <code>boot.loader.limine.secureBoot.enable</code> set to true and reboot. Secure Boot should be enabled after reboot, but some devices will require it to be re-enabled manually in the UEFI firmware.

	Once rebooted, you can verify the ~~secure boot~~ status using, <code>bootctl status</code>.		Once rebooted, you can verify the Secure Boot status using, <code>bootctl status</code>.

	<syntaxHighlight lang=console>		<syntaxHighlight lang=console>
Line 53:		Line 53:
	[https://codeberg.org/Limine/Limine Limine Codeberg Repository]		[https://codeberg.org/Limine/Limine Limine Codeberg Repository]
	[[Category:Booting]]		[[Category:Booting]]
			[[Category:Secure Boot]]

Ben9986: Added "See Also" section

2025-12-08T22:21:18Z

Added "See Also" section

← Older revision		Revision as of 22:21, 8 December 2025
Line 47:		Line 47:
	...		...
	</syntaxHighlight>		</syntaxHighlight>

			== See Also ==
			[[Secure Boot]]

			[https://codeberg.org/Limine/Limine Limine Codeberg Repository]
	[[Category:Booting]]		[[Category:Booting]]

Ben9986: Added more detail to the Secure Boot section. Step by step instructions for setting up and enabling secure boot

2025-12-08T21:53:21Z

Added more detail to the Secure Boot section. Step by step instructions for setting up and enabling secure boot

← Older revision		Revision as of 21:53, 8 December 2025
Line 1:		Line 1:
	{{expand}}		{{expand}}

	[https://limine-bootloader.org/ Limine] is a modern, advanced, portable, ~~multiprotocol~~ bootloader and boot manager. It aims to be more robust alternative to bootloaders like [[GNU GRUB]]. It can be configured ~~via~~ NixOS options under		[https://limine-bootloader.org/ Limine] ([https://www.merriam-webster.com/dictionary/in%20limine lē-mi-ne]) is a modern, advanced, portable, multi-protocol bootloader and boot manager. It aims to be a more robust alternative to bootloaders like [[GNU GRUB]] and [[Systemd/boot\|Systemd-boot]]. It can be configured using the NixOS options under
	[https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]		[https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]

	== ~~SecureBoot~~ ==		== Secure Boot ==

	Limine Secure Boot support is principally controlled by the [https://search.nixos.org/options?channel=unstable&show=boot.loader.limine.secureBoot.enable&query=boot.loader.limine.secureBoot.enable module options].		Limine Secure Boot support is principally controlled by the [https://search.nixos.org/options?channel=unstable&show=boot.loader.limine.secureBoot.enable&query=boot.loader.limine.secureBoot.enable module options].
Line 10:		Line 10:
	{{warning\|Limine SecureBoot is still in development and requires some prerequisites and precautions. For more information, please see the Limine GitHub repository and documentation.}}		{{warning\|Limine SecureBoot is still in development and requires some prerequisites and precautions. For more information, please see the Limine GitHub repository and documentation.}}

	~~To enable Secure Boot~~, ~~first switch to Limine as your bootloader. You may find the existing [[Bootloader]] documentation helpful.~~		=== Prerequisites ===
			Before trying to set up secure boot, ensure that:

	~~Then add~~ <code>sbctl</code> ~~to you systems packages. It must be~~ installed on a system level.		# Limine is enabled as the current bootloader using <code>boot.loader.limine.enable = true</code>. You may find the existing [[Bootloader]] documentation helpful.
			# <code>sbctl</code> is installed as a system level package (using <code>environment.systemPackages</code>).

	Generate keys ~~with~~ <~~code~~>sbctl create-keys</code>		=== Generate Secure Boot Keys ===
			<code>sbctl</code> is used to securely generate & store the Secure Boot keys. Generating the keys is as easy as:<syntaxhighlight lang="console">
			$ sudo sbctl create-keys
			</syntaxhighlight>This stores your secure boot keys at <code>/var/lib/sbctl</code> and sets the permissions so that they can only be read by the root user.

	Enable Secure Boot Setup Mode. This usually involves entering the BIOS and ~~selecting an~~ option to ~~do so. On some BIOS implementations, there is not an explicit option to do so, but it will enter setup mode if one clears~~ all Secure Boot ~~keys~~.		=== Enable UEFI Secure Boot Setup Mode ===
			This usually involves entering the UEFI firmware menu (BIOS) and enabling the relevant option under Secure Boot named "Reset to Setup Mode" or "Erase all Secure Boot settings".

	~~Now~~, ~~run~~ <~~code~~>~~sbctl enroll~~-~~keys~~ -m -f</~~code> to actually enroll your~~ keys.		On some UEFI firmware implementations, there is not an explicit option to enter Setup Mode, instead the user must chose the option(s) to erase existing Secure Boot keys.
			{{Warning\|</br>On Thinkpad devices, do not select "Clear All Secure Boot Keys" as it will drop the Forbidden Signature Database (dbx). Make sure to only select "Reset to Setup Mode".</br>
			On the Framework 13 Core Ultra Series 1, do not select "Erase all Secure Boot Settings" in the firmware. This firmware is bugged, instead delete all keys from the "PK", "KEK" and "DB" sections manually. See [https://community.frame.work/t/cant-enable-secure-boot-setup-mode/57683/5 this] thread on the Framework forum.}}
			After entering Setup Mode or clearing the keys, reboot back into NixOS.

	~~You~~ can ~~now rebuild with~~ <code>~~boot~~.~~loader.limine.secureBoot.enable~~</code> ~~set to true, and disable Secure Boot setup mode~~.		=== Enroll Secure Boot Keys ===
			Once in Setup Mode, your generated keys can be enrolled using <code>sbctl</code>. <syntaxhighlight lang="console">
			$ sudo sbctl enroll-keys --microsoft --firmware-builtin
			</syntaxhighlight>The <code>--microsoft</code> option is required for some devices which have hardware OptionROMS signed by Microsoft keys.

	If this ~~has been~~ successful, you can ~~check~~ using <code>bootctl status</code>		If this is successful, you can now rebuild with <code>boot.loader.limine.secureBoot.enable</code> set to true and reboot. Secure Boot should be enabled after reboot, but some devices will require it to be re-enabled manually in the UEFI firmware.

			Once rebooted, you can verify the secure boot status using, <code>bootctl status</code>.

	<syntaxHighlight lang=console>		<syntaxHighlight lang=console>

Golbinex: Support for Limine Secure Boot reached stable channel

2025-12-02T19:16:11Z

Support for Limine Secure Boot reached stable channel

← Older revision		Revision as of 19:16, 2 December 2025
Line 8:		Line 8:
	Limine Secure Boot support is principally controlled by the [https://search.nixos.org/options?channel=unstable&show=boot.loader.limine.secureBoot.enable&query=boot.loader.limine.secureBoot.enable module options].		Limine Secure Boot support is principally controlled by the [https://search.nixos.org/options?channel=unstable&show=boot.loader.limine.secureBoot.enable&query=boot.loader.limine.secureBoot.enable module options].

	{{warning\|Limine SecureBoot is still in development and requires some prerequisites and precautions~~. Currently it's only available for nixos-unstable~~. For more information, please see the Limine GitHub repository and documentation.}}		{{warning\|Limine SecureBoot is still in development and requires some prerequisites and precautions. For more information, please see the Limine GitHub repository and documentation.}}

	To enable Secure Boot, first switch to Limine as your bootloader. You may find the existing [[Bootloader]] documentation helpful.		To enable Secure Boot, first switch to Limine as your bootloader. You may find the existing [[Bootloader]] documentation helpful.

0x4A6F: Moved from SecureBoot page with some minor fixups

2025-08-05T20:28:10Z

Moved from SecureBoot page with some minor fixups

@@ Line 1: / Line 1: @@
 {{expand}}
-[https://limine-bootloader.org/ Limine] is a modern, advanced, portable, multiprotocol bootloader and boot manager. It aims to be more robust alternative to bootloaders like [[GNU GRUB]]. It can be configured via NixOS options: <syntaxhighlight lang="nixos">
+[https://limine-bootloader.org/ Limine] is a modern, advanced, portable, multiprotocol bootloader and boot manager. It aims to be more robust alternative to bootloaders like [[GNU GRUB]]. It can be configured via NixOS options under
-# NixOS options:
+[https://search.nixos.org/options?channel=unstable&show=boot.loader.limine. boot.loader.limine.]
 boot.loader.limine.
-</syntaxhighlight>
+== SecureBoot ==
 [[Category:Booting]]

Klinger: (options)

2025-07-08T16:35:30Z

(options)

← Older revision		Revision as of 16:35, 8 July 2025
Line 1:		Line 1:
	{{expand}}		{{expand}}

	[https://limine-bootloader.org/ Limine] is a modern, advanced, portable, multiprotocol bootloader and boot manager. It aims to be more robust alternative to bootloaders like [[GNU GRUB]].		[https://limine-bootloader.org/ Limine] is a modern, advanced, portable, multiprotocol bootloader and boot manager. It aims to be more robust alternative to bootloaders like [[GNU GRUB]]. It can be configured via NixOS options: <syntaxhighlight lang="nixos">
			# NixOS options:
			boot.loader.limine.
			</syntaxhighlight>
	[[Category:Booting]]		[[Category:Booting]]

Klinger: Link to Limine added, category:booting added, motivation added (a sentence at least)

2025-07-08T16:33:00Z

Link to Limine added, category:booting added, motivation added (a sentence at least)

← Older revision		Revision as of 16:33, 8 July 2025
Line 1:		Line 1:
	{{expand}}		{{expand}}

	Limine is a modern, advanced, portable, multiprotocol bootloader and boot manager.		[https://limine-bootloader.org/ Limine] is a modern, advanced, portable, multiprotocol bootloader and boot manager. It aims to be more robust alternative to bootloaders like [[GNU GRUB]].

			[[Category:Booting]]

← Older revision		Revision as of 19:14, 17 February 2026
Line 56:		Line 56:
	== See Also ==		== See Also ==
	[[Secure Boot]]		[[Secure Boot]]

			[[Bootloader]]

	[https://codeberg.org/Limine/Limine Limine Codeberg Repository]		[https://codeberg.org/Limine/Limine Limine Codeberg Repository]
	[[Category:Booting]]		[[Category:Booting]]
	[[Category:Secure Boot]]		[[Category:Secure Boot]]