Hello. I just received my new mini PC and I want to delete the Windows that comes installed and install Tumbleweed. I have seen in the Yast installer that the default grub is Grub-bls instead of grub-efi, which was the default until now. Which one should I choose, and what benefits does grub-bls offer to make it the new default boot manager in Tumbleweed? Thank you for Tumbleweed.
It seems it may be part of OpenSUSEs move to full disk encryption using TPM/secure boot. There was secureboot before, but now everything but a small FAT partition is encrypted.
They tweaked things so that that an encrypted binary is created and unlocked only by TPM/secure boot, prior to actually running the boot / main kernel stuff. The system regenerates the binary after each load to stay current with the rolling TPM registers.
https://microos.opensuse.org/blog/2023-12-20-sdboot-fde/