snippetbashTip

limine-enroll-config — Embed or reset the BLAKE2B hash of `limine.conf` in the Limine EFI executable. Used to ensure the co

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

thelimine-enroll-confighashcommandblake2bcliresetembed

linux

Problem

How to use the limine-enroll-config command: Embed or reset the BLAKE2B hash of limine.conf in the Limine EFI executable. Used to ensure the configuration file has not been tampered with when Secure Boot is enabled. More information: <https://codeberg.org/Limine/Limine/src/branch/trunk/USAGE.md#secure-boot>.

Solution

limine-enroll-config — Embed or reset the BLAKE2B hash of limine.conf in the Limine EFI executable. Used to ensure the configuration file has not been tampered with when Secure Boot is enabled. More information: <https://codeberg.org/Limine/Limine/src/branch/trunk/USAGE.md#secure-boot>.

Embed a config file's BLAKE2B hash into the Limine EFI executable:

limine-enroll-config {{path/to/BOOTX64.EFI}} {{blake2b_hash}}

Remove the enrolled hash from the executable, disabling the config integrity check:

limine-enroll-config --reset {{path/to/BOOTX64.EFI}}

Display help:

limine-enroll-config --help

Code Snippets

Embed a config file's BLAKE2B hash into the Limine EFI executable

limine-enroll-config {{path/to/BOOTX64.EFI}} {{blake2b_hash}}

Remove the enrolled hash from the executable, disabling the config integrity check

limine-enroll-config --reset {{path/to/BOOTX64.EFI}}

Display help

limine-enroll-config --help

Context

tldr-pages: linux/limine-enroll-config

Revisions (0)

No revisions yet.