The following configuration options in loader.conf are
understood:
default
A glob pattern to select the default entry. The default entry
may be changed in the boot menu itself, in which case the
name of the selected entry will be stored as an EFI variable,
overriding this option.
Table 1. Automatically detected entries will use the
following names:
┌──────────────────────────────┬──────────────────────┐
│Name │ Description │
├──────────────────────────────┼──────────────────────┤
│auto-efi-default │ EFI Default Loader │
├──────────────────────────────┼──────────────────────┤
│auto-efi-shell │ EFI Shell │
├──────────────────────────────┼──────────────────────┤
│auto-osx │ macOS │
├──────────────────────────────┼──────────────────────┤
│auto-reboot-to-firmware-setup │ Reboot Into Firmware │
│ │ Interface │
├──────────────────────────────┼──────────────────────┤
│auto-windows │ Windows Boot Manager │
└──────────────────────────────┴──────────────────────┘
timeout
How long the boot menu should be shown before the default
entry is booted, in seconds. This may be changed in the boot
menu itself and will be stored as an EFI variable in that
case, overriding this option.
If the timeout is disabled, the default entry will be booted
immediately. The menu can be shown by pressing and holding a
key before systemd-boot is launched.
console-mode
This option configures the resolution of the console. Takes a
number or one of the special values listed below. The
following values may be used:
0
Standard UEFI 80x25 mode
1
80x50 mode, not supported by all devices
2
the first non-standard mode provided by the device
firmware, if any
auto
Pick a suitable mode automatically using heuristics
max
Pick the highest-numbered available mode
keep
Keep the mode selected by firmware (the default)
editor
Takes a boolean argument. Enable (the default) or disable the
editor. The editor should be disabled if the machine can be
accessed by unauthorized persons.
auto-entries
Takes a boolean argument. Enable (the default) or disable
entries for other boot entries found on the boot partition.
In particular, this may be useful when loader entries are
created to show replacement descriptions for those entries.
auto-firmware
Takes a boolean argument. Enable (the default) or disable the
"Reboot into firmware" entry.
random-seed-mode
Takes one of "off", "with-system-token" and "always". If
"off" no random seed data is read off the ESP, nor passed to
the OS. If "with-system-token" (the default) systemd-boot
will read a random seed from the ESP (from the file
/loader/random-seed) only if the LoaderSystemToken EFI
variable is set, and then derive the random seed to pass to
the OS from the combination. If "always" the boot loader will
do so even if LoaderSystemToken is not set. This mode is
useful in environments where protection against OS image
reuse is not a concern, and the random seed shall be used
even with no further setup in place. Use bootctl random-seed
to initialize both the random seed file in the ESP and the
system token EFI variable.
See Random Seeds
