On Thu, Jul 20, 2017 at 08:05:31PM +0200, Jan Kiszka wrote:
> On 2017-07-12 14:38, [ext] Reichel Andreas wrote:
> > Update and rework documentation for better user support.
> >
>
> > +# umount /mnt
> > +# mount /dev/sdX3 /mnt && cd /mnt
> > +# echo -n "KERNEL2" | iconv -f ascii -t UTF-16LE > EFILABEL
> > +# bg_setenv -f -r 2 --kernelfile "C:KERNEL2:vmlinuz-linux" 
> > --kernelparams="root=/dev/sdX5 noinitrd"
> > +# umount /mnt
>
> It's probably better to pull the setup of the second environment after
> booting into the first one. Having both created initially makes no sense
> in practice.
>

If efibootguard is compiled for dual-FAT config, then it expects two
config partitions. This is the default. It tries to boot with one, but
then it warns about one being corrupted. To prevent this warning, both
are initialized, which is a clean starting point. Efibootguard has no
way of seeing if this is just the very first initial setup or if it is
executed after a hard disk failure were one partition is gone. It also
does not know if the only config existing is correct, so just cloning
the only thing that is there is based on an unneeded assumption.

> > +The following command create an entry for `bootx64.efi`:
> > +
> > +```
> > +bcfg boot add 0 fs0:\efi\boot\bootx64.efi "efi boot guard"
> 
> In fact, that should never be needed for any non-broken BIOS. At most,
> you would have to remove any existing settings and let the BIOS fall
> back to that. I would not highlight the exceptional case here.
> 

Not true. Maybe you have two harddisks and want to boot from fs0 instead
from fs1. Or you want to boot fs0: before network boot... I would say it
is not about the firmware being broken or not... it is about the NVRAM
settings the user may have.

Kind regards,
Andreas

-- 
Andreas Reichel
Dipl.-Phys. (Univ.)
Software Consultant

[email protected], +49-174-3180074
TNG Technology Consulting GmbH, Betastr. 13a, 85774 Unterfoehring
Geschaeftsfuehrer: Henrik Klagges, Christoph Stock, Dr. Robert Dahlke
Sitz: Unterfoehring * Amtsgericht Muenchen * HRB 135082

-- 
You received this message because you are subscribed to the Google Groups "EFI 
Boot Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/efibootguard-dev/20170721120022.GA19266%40iiotirae.
For more options, visit https://groups.google.com/d/optout.

Reply via email to