# Foxboron/sbctl

:computer: :lock: :key: Secure Boot key manager

Repository: https://github.com/Foxboron/sbctl
Canonical: https://ross.abutalabs.com/products/sbctl
Language: Go
License: MIT
License Family: permissive
Topics: secureboot, efi-stub, signatures, uefi-secureboot, uefi, efi, linux, go, golang, secure-boot
Last push: 2026-08-02T18:36:57+00:00

## Health v2 (maintenance only)
Score: 72/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 95, release rhythm 27, longevity 100
- inputs: {"age_days": 2313, "days_push": 31, "days_rel": 330, "gap_med": 176.0, "n_releases_24m": 3}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2247, forks 110 (observed 2026-08-28T04:06:30.177889+00:00)

## What it is
sbctl is a user-friendly Secure Boot key manager for Linux written in Go. It creates and enrolls UEFI Secure Boot keys, tracks files that need signing, verifies the ESP, and generates EFI stub bundles.

## Use cases
- set up secure boot on my linux machine
- manage uefi secure boot keys
- sign kernel and bootloader files for secure boot
- generate efi stub unified kernel images
- enroll custom keys into secure boot
- verify which files in the esp are missing signatures
- rotate secure boot signing keys

## When to choose
- you want a simple CLI to configure and manage UEFI Secure Boot on Linux
- you need a signing database to keep boot chain files consistently signed
- you want to create unified kernel images / EFI stubs
- you prefer a tool independent of existing secure boot tooling

## When to avoid
- you need TPM or hardware token key support (still on the roadmap)
- you are on Windows or macOS since it targets Linux UEFI
- you need a GUI for secure boot management

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, cryptography, cli, developer-tools
- domain: security, operating-systems, developer-tools
- platform: cli
- tags: secure-boot, uefi, efi, key-management, signing, systemd-boot, command-line, linux

## Member repositories
- Foxboron/sbctl (main) score 72

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:30.177889+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:43:57.672895+00:00, confidence not recorded.
  - readme: https://github.com/Foxboron/sbctl (fetched 2026-08-28T04:06:30.177889+00:00, sha ae6bae6937ba)
- Data as of 2026-08-30T08:39:29.467469+00:00.