Re: Do MacBook support/need EFI secure boot (Was: Porting the standard image from live-wrapper to live-build)

2021-04-08 Thread Andrew M.A. Cater
think there is hardware out there with>> 32bit > >> EFI and 64bit CPUs. > Correct, early MacBooks are of this type. > I own one, a MacBook 2,1. > Do you know whether your MacBook 2.1 supports/needs EFI secure boot? > Currently the live-build generated image does not con

Re: Do MacBook support/need EFI secure boot (Was: Porting the standard image from live-wrapper to live-build)

2021-04-08 Thread Roland Clobus
pe. I own one, a MacBook 2,1. Do you know whether your MacBook 2.1 supports/needs EFI secure boot? Currently the live-build generated image does not contain a signed EFI, but it could get one with a reasonable amount of effort. With kind regards, Roland Clobus OpenPGP_signature Description: OpenPGP digital signature

Bug#821054: marked as done (debian-cd will need changes for UEFI Secure Boot)

2019-02-02 Thread Debian Bug Tracking System
Your message dated Sat, 02 Feb 2019 23:04:09 + with message-id and subject line Bug#821054: fixed in debian-cd 3.1.22 has caused the Debian Bug report #821054, regarding debian-cd will need changes for UEFI Secure Boot to be marked as done. This means that you claim that the problem has been

Re: Plan of action for Secure Boot support

2014-08-20 Thread Paul R. Tagliamonte
Perhaps we should find time to hack at DebConf -T On Tue, Aug 19, 2014 at 5:16 PM, Steve McIntyre st...@einval.com wrote: On Tue, Aug 19, 2014 at 01:38:44PM -0700, Ben Hutchings wrote: So far as I know, no progress has been made on the above steps or any alternate approach. Ditto, I've not

Re: Plan of action for Secure Boot support

2014-08-19 Thread Ben Hutchings
On Thu, 2014-08-14 at 23:38 +0200, Cyril Brulebois wrote: [...] 1. Colin Watson will prepare dak changes to support upload and subsequent signing of EFI executables. (This is an embedded, not detached, signature.) 2. Steve Langasek will prepare and upload a package of the 'shim' EFI

Re: Plan of action for Secure Boot support

2014-08-19 Thread Steve McIntyre
On Tue, Aug 19, 2014 at 01:38:44PM -0700, Ben Hutchings wrote: So far as I know, no progress has been made on the above steps or any alternate approach. Ditto, I've not seen (or done) anything about this. -- Steve McIntyre, Cambridge, UK.st...@einval.com

Re: Plan of action for Secure Boot support

2014-08-14 Thread Cyril Brulebois
Hi Ben, Ben Hutchings b...@decadent.org.uk (2013-08-13): Colin Watson and Stefano Rivera talked about how Ubuntu had implemented Secure Boot and what they believed were the requirements. Apparently, the Secure Boot spec requires each stage of the boot code to validate signatures only until

Re: Plan of action for Secure Boot support

2013-08-14 Thread Bastian Blank
On Wed, Aug 14, 2013 at 12:30:55AM +0200, Ben Hutchings wrote: Editing of binary packages is icky, so that's not part of the plan. Instead, after dak signs an executable, the package maintainer downloads and copies those into a separate 'source' package, which has a trivial debian/rules. (And

Secure Boot meeting at DebConf

2013-08-13 Thread Ben Hutchings
You might be interested in this meeting at DebConf. It should be streamed (see http://blog.debconf.org/blog/debconf13/hl_dc13_video.dc) so others can participate by IRC, though I'm not sure how well that works for meetings. Secure Boot for Debian Linux today, 14:30 CST (12:30 UTC), talk room 2

Plan of action for Secure Boot support

2013-08-13 Thread Ben Hutchings
Colin Watson and Stefano Rivera talked about how Ubuntu had implemented Secure Boot and what they believed were the requirements. Apparently, the Secure Boot spec requires each stage of the boot code to validate signatures only until ExitBootServices() is called. (At this point the firmware

Re: Plan of action for Secure Boot support

2013-08-13 Thread Joey Hess
packages when a Secure Boot environment is detected? (or (3) something else…) The secure boot shim is a small bootloader. It's the only part that absolutely needs to be signed by MS, AIUI. It was designed to facilitate distributions in our position. Signed versions are also already available

Re: Plan of action for Secure Boot support

2013-08-13 Thread Ben Hutchings
a Secure Boot environment is detected? (or (3) something else…) [...] Signing of EFI executables (aside from MS signature on shim) would be done by dak and would require manual intervention from the FTP team. Editing of binary packages is icky, so that's not part of the plan. Instead, after dak

Re: Secure boot.

2013-05-09 Thread Steve McIntyre
On Mon, May 06, 2013 at 01:01:57PM +1200, Philip Charles wrote: Hi folks, What is the story behing the release announcement saying that secure boot has not yet been implemented for Wheezy? I have been running a dual boot Wheezy/Win 8 machine for 3 weeks. It will boot

Re: Secure boot.

2013-05-09 Thread Philip Charles
On Fri, 10 May 2013, Steve McIntyre wrote: On Mon, May 06, 2013 at 01:01:57PM +1200, Philip Charles wrote: Hi folks, What is the story behing the release announcement saying that secure boot has not yet been implemented for Wheezy? I have been running a dual boot Wheezy

Secure boot.

2013-05-05 Thread Philip Charles
Hi folks, What is the story behing the release announcement saying that secure boot has not yet been implemented for Wheezy? I have been running a dual boot Wheezy/Win 8 machine for 3 weeks. It will boot the official discs. Thanks, Phil. -- Philip Charles; 39a Paterson