postmarketOS

210 readers

21 users here now

postmarketOS - a real Linux distribution for phones and other mobile devices 🐧 📱 👩‍💻

Rules:

Be nice, follow CoC
Don’t ask for device ports, consider DIY
Report bugs in the issue tracker (not here! 🐛)

See also:

founded 8 months ago

MODERATORS

JustSoup321@lemmy.world

ollieparanoid@lemmy.world

achill@lemmy.world

PureTryOut@lemmy.world

Locking the bootloader (sh.itjust.works)

submitted 1 day ago by med@sh.itjust.works to c/postmarketos@lemmy.world

6 comments fedilink hide all child comments

I've been looking through the documentation and installation guides for PostmarketOS, and I've noticed there seems to be no mention of locking the bootloader after flashing.

Is that because there's no issue with doing so, or because you can't?

I'm looking at installing on a Fairphone 5, but anyone with any device that's able to share their experience would be appreciated.

you are viewing a single comment's thread
view the rest of the comments

[–] oddsys@lemmy.world 1 points 1 day ago* (last edited 1 day ago) (1 children)

My experience with the FP4 is you can only lock the bootloader with a couple of "official" distro's. And even then there are conditions where this can go bad.

I can use the default factory version provided by fairphone, I can use e/os.

While I can install and use postmarketos or a lineage image, I can't lock the bootloader without turning it into a brick. I believe it is to do with boot partition signing by the CPU manufacturer and the android bootloader checking it.

[–] hornedfiend@piefed.social 1 points 1 day ago

i think it's simpler than that. It merely stores the latest security update you had when you locked your bootloader and doesn't allow you to rollback to an earlier version,but anything newer - regardless of the ROM being official or eOS/iodé , would allow you to relock it.

TLDR: flashing ROM security patch version > your existing security patch version.