Traditionally, the automatic network installation relies on the BIOS/UEFI to download the bootloader and kernel with PXE Boot which is designed for the local network and not scalable. Besides, the client cannot verify the download server, not to mention the possibility to encrypt the connection. Fortunately, the recent UEFI firmware starts to support UEFI HTTPS Boot to provide the secure connection and make the server verifiable. openSUSE supports UEFI HTTPS Boot since 15.0. This session will introduce how HTTPS Boot works and how can the user setup their own server to install their remote systems securely.

共筆: https://hackmd.io/@coscup/rJJ8kQxEH