Re: shim bootloader with only SUSE signature?

Malte Gell <[email protected]> Mon, 3 Apr 2017 21:18:51 +0200
Newsgroups gmane.linux.suse.security
Message-ID <[email protected]>
Am 03.04.2017 um 02:08 schrieb Malte Gell:
> Morning!
> 
> I may deal with a system that is not able to cope with a EFI program
> that carries 2 signatures, like shim. efi.
> Thus, is there a shim loader that only carries one signature, the
> signature from openSUSE?

I found a workaround that may help others who find this as well:
load the kernel as a EFI stub. While loading with Grub2, just replacing
linux with linuxefi and initrd with initrdefi, that did the job :-) To
use secure boot this may require to load the SUSE key to MOK.



-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]