Re: F45 Change Proposal: Grub EFI For Confidential Computing (self-contained)

Gerd Hoffmann <[email protected]>
Newsgroups gmane.linux.redhat.fedora.devel
Message-ID <[email protected]>
  Hi,

> In this case however, we explicitly use Type 1 BLS configs pointing to
> a Type 2 UKI to be able to fully control the oder in which the boot
> entries are listed, and notably to control the default entry. We need
> that to be able to rollback the system to a previous entry that may
> not sort first.
> 
> Thus the embedded GRUB config uses the `blscfg` command:
> https://src.fedoraproject.org/rpms/grub2/blob/rawhide/f/grub-cc.cfg#_2
> 
> If someone also want this to also support booting standalone UKIs then
> they would have to add the `uki` command to the config:
> https://www.gnu.org/software/grub/manual/grub/grub.html#index-uki

The config is compiled into the grub-cc binary, so this isn't something
the user can change.  IMHO grub-cc should be fully BLS-spec compliant,
and this includes supporting standalone UKIs.

So, can we please add 'uki' to the built-in config?

thanks,
  Gerd

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.