On Wed, 2026-06-24 at 06:48 -0400, Neal Gompa wrote: > On Wed, Jun 24, 2026 at 6:44 AM Timothée Ravier via devel > <[email protected]> wrote: > > > > Neal Gompa wrote: > > > From the Fedora Cloud point of view, I am generally supportive of > > > this. I would like to see other common filesystem modules re-added > > > though (particularly btrfs, but it also probably makes sense to re-add > > > xfs and ext4). > > > > This contradicts the main goal behind this package which is to include as > > few modules as possible to reduce the attack surface and thus the need for > > updates. When using UKIs, we only need support for the FAT filesystem that > > is used to store them in the ESP. > > But we don't *have* to store UKIs on the ESP, and we would prefer > *not* doing that. And aside from that, those three modules are by far > the most used and well-maintained modules. It's not like I'm asking > for HFS+ support to be enabled on grub-cc.
We (Fedora) should absolutely aim to do so and simplify the whole process. I (with my security hat on) absolutely want to eliminate any software that is not absolutely necessary from the boot process, and if complex and bloated bootloaders can be eliminated they *should* be eliminated in all cases where that is possible. Even more in cloud images which are probably going to be the best case scenario given the reduced variability of HW and the fact we can actually easily test it too. Best, Simo. -- Simo Sorce Distinguished Engineer RHEL Crypto Team Red Hat, Inc -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
