rhboot/shim
UEFI shim loader observed · 2026-08-28
Health v2 · maintenance only
69/100
- Activity 94
- Release rhythm 18
- Longevity 100
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 147
- age_days: 5257
- days_rel: 385
- days_push: 37
- n_releases_24m: 2
Adoption not part of the score
1099 stars · 349 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
shim is a small first-stage UEFI bootloader written in C that loads and validates a second-stage bootloader, enabling Secure Boot on Linux systems. It verifies binaries against built-in vendor certificates, supports denylists (DBX/MOKX/SBAT), and extends TPM PCRs with loaded target digests.
Use cases
- boot linux with secure boot enabled
- chainload grub from uefi secure boot
- sign a custom bootloader for secure boot
- load unified kernel images with secure boot
- measure boot components into tpm pcrs
When to choose
- you need to boot an unsigned or third-party bootloader while uefi secure boot is enabled
- you are building a linux distribution that must work with microsoft's secure boot signing
- you want tpm-based measured boot for disk encryption or attestation
When to avoid
- your system does not use uefi (legacy bios boot)
- you do not need secure boot and can boot your bootloader directly
- you need a full boot manager rather than a first-stage loader
Facets
library · maturity active
security cryptography security operating-systems developer-tools windows cross-platform uefi secure-boot bootloader firmware tpm efi-application linux
1 source
- readme: https://github.com/rhboot/shim · fetched 2026-08-28 · 20a7fca83bde
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| rhboot/shim | main | 69 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem