> On 29 Jul 2022, at 06:53, Nico Kadel-Garcia wrote:
>
> On Tue, Jul 26, 2022 at 4:07 PM Kevin Kofler via devel
> wrote:
>>
>> Chris Murphy wrote:
>>> a. Fix GRUB by giving it the ability to modify UEFI NRAM "bootnext" value,
>>> so that instead of chainloading the Windows bootloader from GR
On Thu, Jul 28, 2022 at 6:52 PM Chris Murphy
wrote:
> Short term approaches:
>
> - Documentation: GRUB's Windows boot option may not work, how to use
> efibootmgr --bootnext and --bootorder
>
Currently there is this (insufficient, of course):
https://ask.fedoraproject.org/t/windows-with-encrypte
On Fr, 29.07.22 00:21, Peter Boy (p...@uni-bremen.de) wrote:
> > One is not really supposed to have multiple ESPs
>
> I have another question regarding multiple ESPs, maybe a bit
> off-topic. For software raid we currently have a kind of „off-label
> use“. Anaconda puts the ESP on a raid partition
* Vitaly Zaitsev via devel:
> On 26/07/2022 20:05, Chris Murphy wrote:
>> Summary: Windows 10/11 increasingly enables Bitlocker (full disk encryption)
>> out of the box with the encryption key sealed in the TPM. Two different
>> issues result:
>
> Microsoft has published a new security bulletin
On Thu, Jul 28, 2022 at 07:47:15PM +0200, Vitaly Zaitsev via devel wrote:
> On 26/07/2022 20:05, Chris Murphy wrote:
> > Summary: Windows 10/11 increasingly enables Bitlocker (full disk
> > encryption) out of the box with the encryption key sealed in the TPM. Two
> > different issues result:
>
>
On Fri, Jul 29, 2022 at 11:26:15AM +0200, Florian Weimer wrote:
> * Vitaly Zaitsev via devel:
>
> > On 26/07/2022 20:05, Chris Murphy wrote:
> >> Summary: Windows 10/11 increasingly enables Bitlocker (full disk
> >> encryption) out of the box with the encryption key sealed in the TPM. Two
> >> d
>
> 2) is still sourced from '/etc/X11/xinit/Xclients' for two envvars:
> - 'DESKTOP' - nickname for one from recognized sessions (GNOME, KDE, MATE
> or LXDE).
> - 'PREFERRED' - in case when 'DESKTOP' unset/unrecognized, this variable
> should be path for program starting graphical session (for ex
I've just created a Fedora Change devoted for this:
https://fedoraproject.org/wiki/Changes/MinizipRenaming
Feel free to add some comments there.
On Thu, Jul 28, 2022 at 6:33 PM Ben Cotton wrote:
> On Thu, Jul 28, 2022 at 4:32 AM Lukas Javorsky
> wrote:
> >
> > The first step I want to do is to
On Thu, Jul 28, 2022 at 11:19 AM Lukas Javorsky wrote:
>
> Also, the idea is to file Bugs for all packages that BuildRequire/Require the
> minizip package and let them know about this change and if they should change
> theirs requirements.
Just an idea: You could even make the switch from miniz
On 29/07/2022 11:55, Daniel P. Berrangé wrote:
This doesn't mean that everything is suddenly going to be 'Secure-cored"
and thus prevent use of shim out of the box.
They will begin enforcing this "Secure-cored" policy very soon.
An open question is just how widely the OEM hardware vendors wil
* Daniel P. Berrangé:
>> Unfortunately, Fedora promoted this broken model with pervasive
>> cross-distribution/cross-OS trust as well. People are generally quick
>> to criticize those who control a PKI, but very few organizations are
>> willing to step up to hold the key material for the key of l
On Fri, Jul 29, 2022 at 01:52:28PM +0200, Florian Weimer wrote:
> * Daniel P. Berrangé:
>
> >> Unfortunately, Fedora promoted this broken model with pervasive
> >> cross-distribution/cross-OS trust as well. People are generally quick
> >> to criticize those who control a PKI, but very few organiz
[ As I've asked you on many occasions before, please send your
questions to the Fedora development mailing list and not to me,
I'm not your personal helper. ]
On Fri, Jul 29, 2022 at 05:49:04PM +0530, Billa Surendra wrote:
> Dear Jones,
>
> After a few months of struggle, I could able to buil
On Fri, Jul 29, 2022, at 4:38 AM, Kamil Paral wrote:
>> - Documentation: GRUB's Windows boot option may not work, how to use
>> efibootmgr --bootnext and --bootorder
>
> Currently there is this (insufficient, of course):
> https://ask.fedoraproject.org/t/windows-with-encrypted-disks-bitlocker-c
On Fri, Jul 29, 2022, at 5:25 AM, Lennart Poettering wrote:
> On Fr, 29.07.22 00:21, Peter Boy (p...@uni-bremen.de) wrote:
>
>> > One is not really supposed to have multiple ESPs
>>
>> I have another question regarding multiple ESPs, maybe a bit
>> off-topic. For software raid we currently have a
Hi,
haven't read all the posts, maybe this was mentioned in one of them.
What about an EFI binary, which sets the next boot entry and initiates a reboot?
This can be loaded by grub with the next boot device as parameter, which can be
dynamically set on grub config generation.
Or even as a BLS en
On Fri, Jul 29, 2022, at 9:29 AM, Philipp Homann wrote:
> Hi,
>
> haven't read all the posts, maybe this was mentioned in one of them.
>
> What about an EFI binary, which sets the next boot entry and initiates
> a reboot?
> This can be loaded by grub with the next boot device as parameter,
> wh
On Do, 28.07.22 17:18, Gregory Bartholomew (gregory.lee.bartholo...@gmail.com)
wrote:
> > One is not really supposed to have multiple ESPs on the same
> > medium. ...
>
> That "on the same medium" is an interesting caveat. I've been trying to do
> A/B type configurations where there are two (or m
On Thu, Jul 28, 2022 at 2:39 PM Chris Adams wrote:
>
> Once upon a time, Vojtech Trefny said:
> > This is also what happens if you choose to "decrypt" your BitLocker
> > volume in Windows so if it is this case, cryptsetup doesn't support
> > it. We intentionally ignored this case mostly because i
> * Vitaly Zaitsev via devel:
>
>
> But they also say this:
>
> | The default state of Secure Boot has a wide circle of trust which can
> | result in customers trusting boot components they may not need. Since
> | the Microsoft 3rd Party UEFI CA certificate signs the bootloaders for
> | all Linu
Once upon a time, Vojtech Trefny said:
> "BitLocker automatic device encryption starts during Out-of-box (OOBE)
> experience.
> However, protection is enabled (armed) only after users sign in with a
> Microsoft Account
> or an Azure Active Directory account. Until that, protection is
> suspended
On Tue, 26 Jul 2022 at 19:06, Chris Murphy wrote:
> b. Add a user space utility modifies system NVRAM such that the next boot
> (only) will directly boot the Windows bootloader.
In fwupd we add a Boot target and sets BootNext to run the capsule
update loader. 99.99% of the time it works just
On behalf of all of the folks working on Fedora licensing improvements,
I have a few things to announce!
New docs site for licensing and other legal topics
--
All documentation related to Fedora licensing has moved to a new
section in Fedo
Looks like dnf makecache is uses a lot more memory, causing issues on
smaller systems/containers.
F34:
Metadata cache created.
1.51user 0.15system 0:12.01elapsed 13%CPU (0avgtext+0avgdata 162440maxresident)k
144inputs+56outputs (0major+46906minor)pagefaults 0swaps
F35:
Metadata cache created
On Fri, 29 Jul 2022 11:19:48 -0400
Matthew Miller wrote:
> Fedora license information in a structured format
> -
>
> The “good” (allowed) and “bad” (not-allowed) licenses for Fedora are
> now stored in a repository, using a simple structured file f
> Looks like dnf makecache is uses a lot more memory, causing issues on
> smaller systems/containers.
>
> F34:
>
> Metadata cache created.
> 1.51user 0.15system 0:12.01elapsed 13%CPU (0avgtext+0avgdata
> 162440maxresident)k
> 144inputs+56outputs (0major+46906minor)pagefaults 0swaps
>
>
> F35:
>
>
On Fri, Jul 29 2022 at 11:19:48 AM -0400, Matthew Miller
wrote:
Many software packages consist of code with different free and open
source licenses. Previous practice often involved
“simplification” of
the package license field when the packager believed that one license
subsumed the other — f
Hi everyone,
This is a weekly report from the CPE (Community Platform Engineering)
Team. If you have any questions or feedback, please respond to this
report or contact us on #redhat-cpe channel on libera.chat
(https://libera.chat/).
Week: 25th July - 29th July 2022
If you wish to read this
Hi folks! I'm proposing we cancel the QA meeting on Monday, I don't
have anything much for the agenda again, and it's a public holiday
here so I won't be working.
If you're aware of anything it would be useful to discuss this week,
please do reply to this mail and we can run the meeting.
Thanks f
29 matches
Mail list logo
