Скачать или смотреть Do You Trust the OS Running on Your Device? (Trusted Boot for Kubernetes)

In this final video of the *Hadron Quickstart**, we set up **trusted boot for an immutable Linux system* using **TPM-backed measurements**.

We generate signing keys, build a trusted Hadron image, and install it using Kairos tooling so that **only verified images are allowed to boot**. Any unauthorized modification will prevent the system from starting, providing a strong security guarantee for edge, cloud, and on-prem environments.

This completes the full lifecycle: install → extend → upgrade → secure boot.

⏱️ *Chapters*

00:00 – What Is Trusted Boot
00:08 – Why Trusted Boot Matters
00:35 – Generating Signing Keys with AuroraBoot
01:32 – Building a Trusted Hadron Image
01:55 – Hadron vs Hadron Trusted (Bootloader Differences)
02:26 – Enabling Trusted Boot in Kairos
02:49 – Building a Signed ISO
04:10 – Creating a VirtualBox VM with UEFI + TPM
05:21 – Adding a TPM Device via CLI
06:24 – Installing via the Web Installer
07:36 – Powering Off and Removing Installation Media
08:14 – Verifying Active / Passive / Recovery Partitions
09:00 – Booting and Verifying Trusted Mode
09:22 – Quickstart Wrap-up

🔗 *Links*
Hadron & Kairos Docs: https://kairos.io/quickstart/trusted-...
Kairos GitHub: https://github.com/kairos-io/kairos

📌 *Next steps*
Explore the documentation or join the community to go deeper into secure, image-based Linux systems. - https://kairos.io/