You are not logged in.

#1 2021-03-30 10:11:01

weltio
Member
From: Germany
Registered: 2009-04-05
Posts: 90

efistub with secure boot

https://wiki.archlinux.org/index.php/Un … oot_loader

in order to implement secure boot one would have to call sbsign on the kernel.
Signing an initramfs is impossible, therefore one probably should use a unified kernel image (https://wiki.archlinux.org/index.php/Sy … rnel_image)

this seems to be tied to systemd-boot. (e.g. /usr/lib/systemd/boot/efi/linuxx64.efi.stub)

Is there a method directly loading a signed environment from uefi?
as far as i understand, the kernel has to be loaded from a fat32 efi partition, am i correct to assume that from this point on the rest can be booted from each FS or is that tied to the bootloader?

The ultimate goal is to boot btrfs on luks directly from uefi

Offline

Board footer

Powered by FluxBB