BREAKING NEWS: Microsoft's CA-trusted blobs landing in Debian (systemd-boot)

Good things come to those who wait: Microsoft ❤️ Linux and after many years of painstaking work, a signed and thus trustworthy third-party UEFI certificate for systemd-boot for Microsoft has landed in Debian Unstable. We say hallelujah and perform a :mastodance:

Hot and greasy: Microsoft's third-party CA-trusted certificates for systemd-boot have just landed in Debian Unstable. This means that nothing should stand in the way of a peaceful coexistence of Linux and Windows, even with UEFI instead of conventional BIOS (or at least much less than before!)

Source: https://fosstodon.org/@bluca/113816075080855087

 A  Mastodon post some minutes ago

Nuntio vobis magnus gaudium, habemus Microsoft 3rd Party UEFI CA-trusted systemd-boot published in Debian unstable! It took many years of work to get here, and special thanks to Ansgar from FTP team and Philipp from DSA for the infra work!

• $ sbverify --list systemd-bootx64.efi.signed
• Image signature issuers:  /CN=Debian Secure Boot CA
• Image signature certificates: subject: /CN=Debian Secure Boot
• Signer 2024 - 20425036 systemd-boot
• URL: ftp.debian.org/debian/pool/main/s/systemd-boot-efi-amd64-signed/

s3n🧩net wishes great fun with filthy dualbooting