Re: F45 Change Proposal: Grub EFI For Confidential Computing (self-contained)

On Wed, Jun 24, 2026 at 6:44 AM Timothée Ravier via devel
<[email protected]> wrote:
>
> Neal Gompa wrote:
> > From the Fedora Cloud point of view, I am generally supportive of
> > this. I would like to see other common filesystem modules re-added
> > though (particularly btrfs, but it also probably makes sense to re-add
> > xfs and ext4).
>
> This contradicts the main goal behind this package which is to include as few modules as possible to reduce the attack surface and thus the need for updates. When using UKIs, we only need support for the FAT filesystem that is used to store them in the ESP.

But we don't *have* to store UKIs on the ESP, and we would prefer
*not* doing that. And aside from that, those three modules are by far
the most used and well-maintained modules. It's not like I'm asking
for HFS+ support to be enabled on grub-cc.



-- 
真実はいつも一つ！/ Always, there's only one truth!
-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new