Struct SecureBootConfig 

pub struct SecureBootConfig {
    pub enabled: bool,
    pub enforce: bool,
    pub kernel_hash: Option<[u8; 32]>,
    pub signature: Option<BootSignature>,
    pub signer_public_key: Option<[u8; 32]>,
}

Secure boot configuration

Fields

enabled: bool

Enable secure boot verification

enforce: bool

Enforce verification (fail hard on mismatch)

kernel_hash: Option<[u8; 32]>

Expected kernel hash (for verification against a known-good image)

signature: Option<BootSignature>

Boot signature for kernel verification

signer_public_key: Option<[u8; 32]>

Signing public key (Ed25519 verifying key, 32 bytes)

Implementations

impl SecureBootConfig

pub const fn default() -> Self

Create default configuration (secure boot disabled)