Suggestions for Whonix Host

[Patrick]

Secure Boot is being discussed here:

enable Linux kernel gpg verification in grub and/or enable Secure Boot by default

Since we are going for enforce kernel module software signature verification [module signing] / disallow kernel module loading by default, should we also work towards enable Linux kernel gpg verification in grub and/or enable Secure Boot by default? Looks doable in principle. KVM: supports both EFI boot and Secure Boot. On Snippet 0x0E: Booting image files and ISOs with KVM/QEMU (EFI and BIOS) - Philipp's Tech Blog see 2. Booting image files with KVM (EFI) The Debian -- Details of package o…