Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-22 Thread Alexander Graf
On 22.01.19 07:35, Michael Chang wrote: > On Fri, Jan 11, 2019 at 08:49:28PM +0100, Alexander Graf wrote: >> >> >> On 11.01.19 20:32, Matthew Garrett wrote: >>> On Thu, Jan 10, 2019 at 12:59 AM Alexander Graf wrote: So really dumb question here: What if we didn't use the MS key? What if >

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-21 Thread Michael Chang
On Fri, Jan 11, 2019 at 08:49:28PM +0100, Alexander Graf wrote: > > > On 11.01.19 20:32, Matthew Garrett wrote: > > On Thu, Jan 10, 2019 at 12:59 AM Alexander Graf wrote: > >> So really dumb question here: What if we didn't use the MS key? What if > >> instead, we just provide a SUSE/openSUSE k

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-21 Thread Michael Chang
On Mon, Jan 14, 2019 at 01:42:29PM -0500, Peter Jones wrote: > On Mon, Jan 14, 2019 at 05:14:21PM +0800, Michael Chang wrote: > > > > 3. The Shim's fallback mode has been used to recreate boot entries after > > > > firmware update for x86, not sure if that any problem for ARM. > > > > > > It thoug

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-21 Thread Michael Chang
On Mon, Jan 14, 2019 at 11:22:23AM +0100, Alexander Graf wrote: > On 01/14/2019 10:14 AM, Michael Chang wrote: > > On Mon, Jan 14, 2019 at 08:07:34AM +0100, Ard Biesheuvel wrote: > > > On Mon, 14 Jan 2019 at 05:58, Michael Chang wrote: > > > > On Fri, Jan 11, 2019 at 10:58:54AM +, Leif Lindhol

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Peter Jones
On Mon, Jan 14, 2019 at 05:14:21PM +0800, Michael Chang wrote: > > > 3. The Shim's fallback mode has been used to recreate boot entries after > > > firmware update for x86, not sure if that any problem for ARM. > > > > It thought fallback was a separate binary? If the distros sign that, > > there

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Peter Jones
On Mon, Jan 14, 2019 at 08:07:34AM +0100, Ard Biesheuvel wrote: > > 3. The Shim's fallback mode has been used to recreate boot entries > > after firmware update for x86, not sure if that any problem for ARM. > > It thought fallback was a separate binary? If the distros sign that, > there is no rea

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Michael Chang
On Mon, Jan 14, 2019 at 10:57:10AM +0100, Ard Biesheuvel wrote: > On Mon, 14 Jan 2019 at 10:53, Michael Chang wrote: > > > > On Mon, Jan 14, 2019 at 08:41:21AM +0100, Ard Biesheuvel wrote: > > > On Mon, 14 Jan 2019 at 08:30, Michael Chang wrote: > > > > > > > > On Fri, Jan 11, 2019 at 03:17:54PM

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Alexander Graf
On 01/11/2019 11:58 AM, Leif Lindholm wrote: On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: Am 10.01.2019 um 09:12 schrieb Michael Chang : Hi, With the advent of new verifier framework and shim lock protocol support to the grub's community, we are driving to the world of UEFI

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Alexander Graf
On 01/14/2019 10:14 AM, Michael Chang wrote: On Mon, Jan 14, 2019 at 08:07:34AM +0100, Ard Biesheuvel wrote: On Mon, 14 Jan 2019 at 05:58, Michael Chang wrote: On Fri, Jan 11, 2019 at 10:58:54AM +, Leif Lindholm wrote: On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: Am 10

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Ard Biesheuvel
On Mon, 14 Jan 2019 at 10:53, Michael Chang wrote: > > On Mon, Jan 14, 2019 at 08:41:21AM +0100, Ard Biesheuvel wrote: > > On Mon, 14 Jan 2019 at 08:30, Michael Chang wrote: > > > > > > On Fri, Jan 11, 2019 at 03:17:54PM +0100, Ard Biesheuvel wrote: > > > > On Fri, 11 Jan 2019 at 11:58, Leif Lind

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Michael Chang
On Mon, Jan 14, 2019 at 08:41:21AM +0100, Ard Biesheuvel wrote: > On Mon, 14 Jan 2019 at 08:30, Michael Chang wrote: > > > > On Fri, Jan 11, 2019 at 03:17:54PM +0100, Ard Biesheuvel wrote: > > > On Fri, 11 Jan 2019 at 11:58, Leif Lindholm > > > wrote: > > > > > > > > On Thu, Jan 10, 2019 at 09:5

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-14 Thread Michael Chang
On Mon, Jan 14, 2019 at 08:07:34AM +0100, Ard Biesheuvel wrote: > On Mon, 14 Jan 2019 at 05:58, Michael Chang wrote: > > > > On Fri, Jan 11, 2019 at 10:58:54AM +, Leif Lindholm wrote: > > > On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > > > > Am 10.01.2019 um 09:12 schrieb

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-13 Thread Ard Biesheuvel
On Mon, 14 Jan 2019 at 08:30, Michael Chang wrote: > > On Fri, Jan 11, 2019 at 03:17:54PM +0100, Ard Biesheuvel wrote: > > On Fri, 11 Jan 2019 at 11:58, Leif Lindholm > > wrote: > > > > > > On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > > > > Am 10.01.2019 um 09:12 schrieb M

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-13 Thread Michael Chang
On Fri, Jan 11, 2019 at 03:17:54PM +0100, Ard Biesheuvel wrote: > On Fri, 11 Jan 2019 at 11:58, Leif Lindholm wrote: > > > > On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > > > Am 10.01.2019 um 09:12 schrieb Michael Chang : > > > > > > > > Hi, > > > > > > > > With the advent of

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-13 Thread Ard Biesheuvel
On Mon, 14 Jan 2019 at 05:58, Michael Chang wrote: > > On Fri, Jan 11, 2019 at 10:58:54AM +, Leif Lindholm wrote: > > On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > > > Am 10.01.2019 um 09:12 schrieb Michael Chang : > > > > > > > > Hi, > > > > > > > > With the advent of ne

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-13 Thread Michael Chang
On Fri, Jan 11, 2019 at 10:58:54AM +, Leif Lindholm wrote: > On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > > Am 10.01.2019 um 09:12 schrieb Michael Chang : > > > > > > Hi, > > > > > > With the advent of new verifier framework and shim lock protocol support > > > to the g

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-11 Thread Alexander Graf
On 11.01.19 20:32, Matthew Garrett wrote: > On Thu, Jan 10, 2019 at 12:59 AM Alexander Graf wrote: >> So really dumb question here: What if we didn't use the MS key? What if >> instead, we just provide a SUSE/openSUSE key and give customers the ability >> to sign their own grub+Linux binaries

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-11 Thread Matthew Garrett
On Thu, Jan 10, 2019 at 12:59 AM Alexander Graf wrote: > So really dumb question here: What if we didn't use the MS key? What if > instead, we just provide a SUSE/openSUSE key and give customers the ability > to sign their own grub+Linux binaries? Then you end up blocking install of any Linux d

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-11 Thread Ard Biesheuvel
On Fri, 11 Jan 2019 at 11:58, Leif Lindholm wrote: > > On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > > Am 10.01.2019 um 09:12 schrieb Michael Chang : > > > > > > Hi, > > > > > > With the advent of new verifier framework and shim lock protocol support > > > to the grub's commu

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-11 Thread Leif Lindholm
On Thu, Jan 10, 2019 at 09:59:38AM +0100, Alexander Graf wrote: > > Am 10.01.2019 um 09:12 schrieb Michael Chang : > > > > Hi, > > > > With the advent of new verifier framework and shim lock protocol support > > to the grub's community, we are driving to the world of UEFI Secure > > Boot, well, a

Re: Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-10 Thread Alexander Graf
> Am 10.01.2019 um 09:12 schrieb Michael Chang : > > Hi, > > With the advent of new verifier framework and shim lock protocol support > to the grub's community, we are driving to the world of UEFI Secure > Boot, well, almost .. > > There is a missing piece in the puzzle remaining, that is boot

Discuss support for the linux kernel's EFI Handover Protocol on x86 and ARM

2019-01-10 Thread Michael Chang
Hi, With the advent of new verifier framework and shim lock protocol support to the grub's community, we are driving to the world of UEFI Secure Boot, well, almost .. There is a missing piece in the puzzle remaining, that is booting linux kernel via it's own EFI Handover Protocol's entry. Strictl