How it works
ChromeOS RMA shims are special images that boot even on enrolled devices. Due to the SH1MMER flaw, the shim rootfs isn't verified, so ArchBoot swaps it with a small bootloader environment.
ArchBoot's bootloader:
- Boots inside the shim environment.
- Finds rootfs partitions (e.g.
shimboot_rootfs:arch). - Copies firmware/modules from recovery + shim into your rootfs.
- Uses pivot_root to enter your Linux rootfs.
- Hands off to the init system (systemd/OpenRC, depending on distro).