Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Steve McIntyre
On Mon, Jun 10, 2019 at 04:35:33PM +0100, Colin Watson wrote: >On Mon, Jun 10, 2019 at 04:15:22PM +0100, Steve McIntyre wrote: >> >> The prefix variable is very much a single value, yes. It's used and >> dereferenced all over the place inside grub as a single const char >> *. Not something I'm

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Colin Watson
On Mon, Jun 10, 2019 at 04:15:22PM +0100, Steve McIntyre wrote: > On Mon, Jun 10, 2019 at 02:32:23PM +0100, Ian Campbell wrote: > >On Mon, 2019-06-10 at 03:37 +0100, Steve McIntyre wrote: > >> Any other suggestions on what we could do? Let me know what you > >> think... > > > >Is signing an extra,

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Steve McIntyre
Hi Ian, On Mon, Jun 10, 2019 at 02:32:23PM +0100, Ian Campbell wrote: >On Mon, 2019-06-10 at 03:37 +0100, Steve McIntyre wrote: >> Any other suggestions on what we could do? Let me know what you >> think... > >Is signing an extra, d-i specific, grubnetXX.efi image out of the >question? Oh,

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Steve McIntyre
On Mon, Jun 10, 2019 at 11:17:52AM +0200, John Paul Adrian Glaubitz wrote: >Hi Steve! > >On 6/10/19 4:37 AM, Steve McIntyre wrote: >> 1. Update the docs to mention this - this is a new thing needed to >> get netboot working with Buster. It's *currently* inconsistent, >> as ia64 and

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Steve McIntyre
On Mon, Jun 10, 2019 at 11:08:35AM +0200, Domenico Andreoli wrote: >On Mon, Jun 10, 2019 at 03:37:41AM +0100, Steve McIntyre wrote: ... >> I can see a couple of options here, but I'm not sure either of them >> are good. Comments would be most welcome! >> >> 1. Update the docs to mention this

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Ian Campbell
On Mon, 2019-06-10 at 03:37 +0100, Steve McIntyre wrote: > Any other suggestions on what we could do? Let me know what you > think... Is signing an extra, d-i specific, grubnetXX.efi image out of the question? Is the hard coded prefix a single prefix or is there a possibility of searching a

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread John Paul Adrian Glaubitz
Hi Steve! On 6/10/19 4:37 AM, Steve McIntyre wrote: > 1. Update the docs to mention this - this is a new thing needed to > get netboot working with Buster. It's *currently* inconsistent, > as ia64 and armhf (as non-SB arches) are still using the old > prefix setting. For the sake

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Domenico Andreoli
I apologize for the signature mess, I removed the offending key resulting from some sbuild setup I attempted some time ago. Dom -- 3B10 0CA1 8674 ACBA B4FE FCD2 CE5B CF17 9960 DE13 signature.asc Description: PGP signature

Re: Grub, UEFI Secure Boot and netboot - help!

2019-06-10 Thread Domenico Andreoli
On Mon, Jun 10, 2019 at 03:37:41AM +0100, Steve McIntyre wrote: > Hey folks, Hi, > > We have a bit of a problem with PXE booting Grub in Buster, as shown > in #928750: > > * On all supported arches, we *used* to generate a Grub netboot image >inside d-i, with a prefix setting of >

Grub, UEFI Secure Boot and netboot - help!

2019-06-09 Thread Steve McIntyre
Hey folks, We have a bit of a problem with PXE booting Grub in Buster, as shown in #928750: * On all supported arches, we *used* to generate a Grub netboot image inside d-i, with a prefix setting of "debian-installer/$arch/grub". The prefix is important, as it's how Grub finds its