SBKEYSYNC(1)

📦
version 0.9.5 · 15 versions
, in alpine 3.23, alpine 3.24, fedora 43

🎀 NAME 🎀

okay so bestie, this is SBKEYSYNC — aka sbkeysync(1), straight out of User Commands: the UEFI secure boot key synchronization tool. she's here, she's iconic, and she's all about updating EFI key databases from the filesystem. 💅✨

✨ SYNOPSIS ✨

sbkeysync [options]

🦋 DESCRIPTION 🦋

Update EFI key databases from the filesystem. that's the mission, no cap: filesystem → EFI key databases. literally the main character arc. 🌸

💖 OPTIONS 💖

  • --efivars-path <dir> — path to efivars mountpoint (or regular directory for testing). lowkey point her at the right spot. 📁
  • --verbose — print verbose progress information. she's chatty and we love that for her. 🗣️
  • --dry-run — don't update firmware key databases. it's giving "look but don't touch" vibe check. 🙈
  • --pk — Set PK. short, sweet, iconic. 👑
  • --keystore <dir> — read keys from <dir>/{db,dbx,KEK}/* (can be specified multiple times, first dir takes precedence). bestie, precedence matters. 🍓
  • --no-default-keystores — don't read keys from the default keystore dirs. bye default keystores, not today. 💀

mwah 💋 this little page is sbkeysync 0.9.5, dated July 2025, and it's literally living in SBKEYSYNC(1). periodt. 🌈

📦 where this page comes from