As per the subject, is it possible? My initial thought is to change something on bootloader to only look for specific UUID on SD card before proceed to boot. However, looking at the responses from old posts, it seems like bootloader is not open for customization for the Pis.
What is the best possible way to achieve this?
PS: I've already encrypted the partitions on SD card, but my customer want to further lock down the Pi to only allow the device to boot from "verified" OS. Hence the question.
What is the best possible way to achieve this?
PS: I've already encrypted the partitions on SD card, but my customer want to further lock down the Pi to only allow the device to boot from "verified" OS. Hence the question.
Statistics: Posted by rasp14 — Thu Jul 16, 2026 8:11 am








