Package: wnpp
Severity: wishlist

* Package name    : efibootnext
  Version         : 0.1.1
  Upstream Contact: Thomas Grainger <[email protected]>
* URL             : https://github.com/graingert/efibootnext
* License         : MIT
  Programming Lang: Shell
  Description     : Reboot to Windows via EFI BootNext (BitLocker-safe)

Adds a GRUB menu entry that reboots into Windows (or other EFI OS) by
setting
the EFI BootNext variable from the initramfs, avoiding the need to change
the
default GRUB entry or risk breaking BitLocker by chainloading the Windows
bootloader directly.

Chainloading \EFI\Microsoft\Boot\bootmgfw.efi from GRUB breaks TPM PCR
measurements, causing BitLocker to prompt for a recovery key. Instead,
efibootnext boots a minimal Linux kernel/initramfs that calls efibootmgr
--bootnext and reboots, so the firmware boots Windows natively with correct
TPM
state.

The premount script runs before the LUKS prompt, so there is no need to
enter
the Linux disk encryption password just to boot Windows.

The GRUB menu entry is auto-generated during update-grub -- it detects
Windows
via os-prober, matches the EFI path to a boot entry via efibootmgr, and
finds
the /boot partition via GRUB's prepare_grub_to_access_device, so no manual
configuration is needed.

Debian packaging is already available upstream.

Reply via email to