I wonder so how can I lock the bootloader. It is best to encrypt it with a password so that you can't boot from any medium other than the hard disk. So that one enters a password and only then sees the menu. Yes so far so good for your help
Yes, so far so good, what is? If you lock the bootloader, GARNIX will work more. Not even your great password querier because of boot synonymous muss.manche mainboards support passwords to input, look at this. But locking a bootloader directly would be the dumbest time of all
Why do not you just encrypt your hard drive?
You can disable all other bootable devices by selecting them in the BIOS / Uefi (=> "boot order"). And then you can password protect the bios / Uefi against unauthorized changes.
Then only the selected hard drive should remain bootable.
It would also be necessary during the boot process no password query.
I just do not know what happens if you swap this disk for another (bootable) hard drive.
Of course you can also do a full encryption of the hard disk (for example, Per BitLocker, or VeraCrypt).
But how exactly that works and where then a password must be entered, I can't say. I have never tried that.
And if that would make sense for your purposes, I'm not sure synonymous.
