[arch-general] Concerning Secure Boot Support

Jelle van der Waa jelle at vdwaa.nl
Mon Dec 10 15:58:41 EST 2012


On Mon, Dec 10, 2012 at 10:28 AM, Thomas Bächler <thomas at archlinux.org>wrote:

> Am 10.12.2012 06:54, schrieb kristof:
> > As it stands, Gummiboot doesn't support calling back to Matthew
> > Garrett's shim and until this happens it won't work in secure boot mode.
>
> Could you refer to any documentation about this? Why would the boot
> loader need to call back into shim?
>
> > Lastly, the shim itself needs to be pulled into [extra] and it should
> > come with some script like "shim-install" which would simply rename the
> > grub-efi binary as grubx64.efi and would place the shim in
> > /boot/efi/EFI/BOOT/x86_64/, renaming it bootx64.efi. Not so difficult at
> > all, but it's another thing to do.
>
> There has been a discussion about this topic just a few days ago. I
> suggest you read it first.
>
>
> Indeed, we shouldn't package packages just because they might build.

I also don't see a reason why Archlinux should support secure boot, it's
only forced on ARM. I would never run it on my laptop even if I had support
for it.


-- 
Jelle van der Waa


More information about the arch-general mailing list