You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: _posts/2025/2025-11-13-tw-grub2-bls.md
+14-12Lines changed: 14 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ date: 2025-11-13 17:00:00+01:00
5
5
layout: post
6
6
image: /wp-content/uploads/2025/05/tw.png
7
7
license: CC-BY-SA-3.0
8
-
title:GRUB2-BLS in openSUSE Tumbleweed is now the default
8
+
title:GRUB2-BLS in openSUSE Tumbleweed is now the default
9
9
categories:
10
10
- Announcements
11
11
- openSUSE
@@ -24,30 +24,30 @@ tags:
24
24
25
25
[openSUSE Tumbleweed](https://get.opensuse.org/tumbleweed/) recently changed the default boot loader from GRUB2 to GRUB2-BLS when installed via YaST.
26
26
27
-
This follows the trending started by MicroOS of adopting boot loaders that are compatible with the [boot loader specification](https://uapi-group.org/specifications/specs/boot_loader_specification/). [MicroOS](https://get.opensuse.org/microos/) is using `systemd-boot`, a very small and fast boot loader from the `systemd` project.
27
+
This follows the trend started by MicroOS of adopting boot loaders that are compatible with the [boot loader specification](https://uapi-group.org/specifications/specs/boot_loader_specification/). [MicroOS](https://get.opensuse.org/microos/) is using `systemd-boot`, a very small and fast boot loader from the `systemd` project.
28
28
29
-
One of the reasons of this change is to simplify the integration of new features, like a full disk encryption based on the `systemd` tools, that will make use of the TPM2 or FIDO2 tokens if they are available.
29
+
One of the reasons for this change is to simplify the integration of new features, like full disk encryption based on `systemd` tools, that will make use of TPM2 or FIDO2 tokens if they are available.
30
+
>>>>>>> master
30
31
31
32
32
33
## What is GRUB2-BLS
33
34
34
35
GRUB2-BLS is just GRUB2 but with some patches on top ported from the Fedora project, that includes some compatibility for the boot loader specification for Type #1 boot entries. Those are small text files stored in `/boot/efi/loader/entries` that the boot loader reads to present the initial menu.
35
36
36
-
Each file contains a reference to the kernel, the `initrd` and the kernel command line that will be used to boot the system, and can be edited directly by the user or managed by tools like `bootctl` and `sdbootutil`.
37
+
Each file contains a reference to the kernel, the `initrd`, and the kernel command line that will be used to boot the system, and can be edited directly by the user or managed by tools like `bootctl` and `sdbootutil`.
37
38
38
-
The next version of GRUB2 (2.14) those patches will be included as part of the project itself, and the upgrade process will be transparent for the final user.
39
+
In the next version of GRUB2 (2.14) those patches will be included as part of the project itself, and the upgrade process will be transparent for the final user.
39
40
40
-
Should be noted that the way that openSUSE deploy GRUB2-BLS is different from the classical GRUB2. GRUB2-BLS is deployed as a single EFI binary installed (copied) in `/boot/efi/EFI/opensuse` that will have embedded all the resources (like the modules, configuration file, fonts, themes and graphics) that previously where placed in `/boot/grub2`.
41
+
It should be noted that the way openSUSE deploys GRUB2-BLS is different from the classical GRUB2. GRUB2-BLS is deployed as a single EFI binary installed (copied) in `/boot/efi/EFI/opensuse` that will have embedded all the resources (like the modules, configuration file, fonts, themes and graphics) that previously were placed in `/boot/grub2`.
41
42
42
43
43
44
## Installation
44
45
45
-
The good news is that with the last version of YaST the process is automatic. The user just needs to follow the default steps and the system will be based on GRUB2-BLS at the end.
46
+
The good news is that with the latest version of YaST the process is automatic. The user just needs to follow the default steps and the system will be based on GRUB2-BLS at the end.
46
47
47
-
The installed will propose first a large ESP partition of about 1GB. This is required because now all the kernel and `initrd`s will be placed in the FAT32 ESP partition, in `/boot/efi/opensuse-tumbleweed`.
48
-
49
-
Of course the user can select during the installation a different boot loader, like the classical `GRUB2` or `systemd-boot`. This can be done in the "Installation Settings" screen presented at the end of the installation proposal. Just select the "Booting" header link and choose your boot loader from there.
48
+
The installer will first propose a large ESP partition of about 1GB. This is required because all the kernel and `initrd`s will now be placed in the FAT32 ESP partition, in `/boot/efi/opensuse-tumbleweed`.
50
49
50
+
Of course the user can select a different boot loader during the installation, like the classical `GRUB2` or `systemd-boot`. This can be done in the "Installation Settings" screen presented at the end of the installation proposal. Just select the "Booting" header link and choose your boot loader from there.
51
51
52
52
## Full disk encryption
53
53
@@ -58,10 +58,12 @@ From there you can set a LUKS2 password and, optionally, enroll a security devic
58
58
59
59
## Usage
60
60
61
-
With GRUB2-BLS we will not have anymore the grub2 tools, like `grub2-mkconfig` or `grub2-install`. Most of them are not required anymore. The boot entries are generated dynamically by the boot loader, so there is no need anymore of generating GRUB2 configuration files, and the installation is just copying the new EFI file into the correct place.
61
+
With GRUB2-BLS we will no longer have grub2 tools like `grub2-mkconfig` or `grub2-install`. Most of them are not required anymore. Boot entries are generated dynamically by the boot loader, so there is no longer any need to generate GRUB2 configuration files, and installation is just copying the new EFI file into the correct place.
62
62
63
-
The upgrade process is also done automatically calling `sdbootutil update`by the snapper plugins or the SUSE module tools, so if btrfs is used all the management will be done transparently by this infrastructure, as was done in the traditional boot loader.
63
+
The upgrade process is also done by automatically calling `sdbootutil update`from the snapper plugins or the SUSE module tools, so if btrfs is used all the management will be done transparently by this infrastructure, as was done in the traditional boot loader.
64
64
65
65
Updating the kernel command line can be now be done by editing the boot loader, or the `/etc/kernel/cmdline` and calling `sdbootutil update-all-entries` to propagate the change into the boot entries of the current snapshot.
66
66
67
67
To manage the FDE configuration you can learn more in the [openSUSE wiki](https://en.opensuse.org/Portal:MicroOS/FDE).
68
+
69
+
<metaname="openSUSE, Open Source, development, Linux, operating systems, Tumbleweed, grub2, sdbootutil, kernel, fde, full disk encryption, systemd"content="HTML,CSS,XML,JavaScript">
0 commit comments