UEFI secure boot

2017-02-16 Thread Dennis Wassenberg
Hi all, I have a question regarding grub2 in relation with UEFI secure boot. I do use a grub2 efi binary which is signed with sbsigntools. If the grub2 starts I think there is in general no information about that the grub2 is booted in secure boot environment. Is there a possibility to show that

Re: UEFI secure boot

2017-02-16 Thread Daniel Kiper
On Thu, Feb 16, 2017 at 09:21:19AM +0100, Dennis Wassenberg wrote: > Hi all, > > I have a question regarding grub2 in relation with UEFI secure boot. I > do use a grub2 efi binary which is signed with sbsigntools. If the grub2 > starts I think there is in general no information about that the

Re: [RFC PATCH] x86/boot: make ELF kernel multiboot-able

2017-02-16 Thread Daniel Kiper
On Wed, Feb 15, 2017 at 12:58:37PM -0800, h...@zytor.com wrote: [...] > Multiboot has a fundamentally broken assumption, which is to do certain work Just to be precise. We are talking about Multiboot2 here. > for the kernel in the bootloader. This is fundamentally a bad idea, because Why it

Re: [RFC PATCH] x86/boot: make ELF kernel multiboot-able

2017-02-16 Thread H. Peter Anvin
On 02/16/17 15:27, Daniel Kiper wrote: > > That is obvious. Do you think that Multiboot/Multiboot2 protocols are > substantially suboptimal? > Yes. They push a lot of things into the bootloader for no good reason, thus tying the kernel's hands and making the whole boot process more fragile.