From f9ac49ee520b3908e980e53d8a7885f82ffacdb6 Mon Sep 17 00:00:00 2001
From: Cornelius Diekmann <1486029+diekmann@users.noreply.github.com>
Date: Sat, 9 Nov 2024 21:21:54 +0100
Subject: [PATCH] Mention to turn off secure boot.

On my Thinkpad X260, it just refused to start. No error message was displayed. It was absolutely unclear whether my binary crashed or there was another problem. The problem was indeed secure boot. Since no error message was displayed, I think it's nice to mention this pitfall here to avoid some frustration.
---
 book/src/tutorial/hardware.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/book/src/tutorial/hardware.md b/book/src/tutorial/hardware.md
index 748d612fe..f96a442a2 100644
--- a/book/src/tutorial/hardware.md
+++ b/book/src/tutorial/hardware.md
@@ -1,5 +1,8 @@
 # Running on Hardware
 
+Prerequisite: To allow loading your unsigned binary on your personal machine,
+[secure boot] needs to be disabled in the BIOS setup.
+
 To run on real hardware you'll need a specially-prepared USB drive.
 
 ## Preparation
@@ -67,6 +70,7 @@ key.
 
 Once the one-time boot menu appears, select your USB drive and press enter.
 
+[secure boot]: https://en.wikipedia.org/wiki/UEFI#Secure_Boot
 [GPT]: https://en.wikipedia.org/wiki/GUID_Partition_Table
 [FAT]: https://en.wikipedia.org/wiki/File_Allocation_Table
 [boot files]: ../concepts/gpt.html#system-partition