secureblue/PREINSTALL-README.md

secureblue

The recommended method to install secureblue is to rebase from an upstream silverblue/kinoite installation. Before rebasing and during the installation, the following checks are recommended.

Preinstall guide

Fedora Installation

• Select the option to encrypt the drive you're installing to.
• Use a strong password when prompted.
• Leave the root account disabled.

BIOS Hardening

• Ensure secureboot is enabled.
• Ensure your BIOS is up to date by checking its manufacturer's website.
• Disable booting from USB (some manufacturers allow firmware changes from live systems).
• Set a BIOS password to prevent tampering.