Re: [PATCH v21 33/33] docs: Document TPM2 key protector

2024-11-05 Thread Daniel Kiper via Grub-devel
On Mon, Nov 04, 2024 at 03:32:06PM +0800, Gary Lin wrote: > Update the user manual to address TPM2 key protector including the two > related commands, tpm2_key_protector_init and tpm2_key_protector_clear, > and the user-space utility: grub-protect. > > Signed-off-by: Gary Lin > --- > docs/grub.te

Re: [PATCH v21 23/33] key_protector: Add TPM2 Key Protector

2024-11-05 Thread Gary Lin via Grub-devel
On Mon, Nov 04, 2024 at 01:04:56PM -0500, Stefan Berger wrote: > > > On 11/4/24 2:31 AM, Gary Lin wrote: > > From: Hernan Gatta > > > > The TPM2 key protector is a module that enables the automatic retrieval > > of a fully-encrypted disk's unlocking key from a TPM 2.0. > > > > The theory of op

Re: [PATCH v21 25/33] util/grub-protect: Add new tool

2024-11-05 Thread Gary Lin via Grub-devel
On Mon, Nov 04, 2024 at 01:11:08PM -0500, Stefan Berger wrote: > > > On 11/4/24 2:31 AM, Gary Lin wrote: > > From: Hernan Gatta > > > > To utilize the key protectors framework, there must be a way to protect > > full-disk encryption keys in the first place. The grub-protect tool > > includes su

Re: [PATCH v21 21/33] tss2: Add TPM2 types and Marshal/Unmarshal functions

2024-11-05 Thread Gary Lin via Grub-devel
On Tue, Nov 05, 2024 at 10:58:47AM +0800, Gary Lin wrote: > On Mon, Nov 04, 2024 at 01:20:45PM -0500, Stefan Berger wrote: > > > > > > On 11/4/24 2:31 AM, Gary Lin via Grub-devel wrote: > > > This commit adds the necessary TPM2 types and structs as the preparation > > > for the TPM2 Software Stac

Re: [PATCH v3 01/16] ieee1275/openfw: IBM client architecture(CAS) reboot support

2024-11-05 Thread avnish
On 2024-10-11 03:13, grub-devel-requ...@gnu.org wrote: Message: 1 Date: Thu, 10 Oct 2024 15:43:19 -0600 From: Leo Sandoval To: grub-devel@gnu.org Subject: [PATCH v3 01/16] ieee1275/openfw: IBM client architecture (CAS) reboot support Message-ID: <20241010214334.1749167-2-lsand...@redhat.

Re: [PATCH v21 25/33] util/grub-protect: Add new tool

2024-11-05 Thread Daniel Kiper via Grub-devel
On Mon, Nov 04, 2024 at 03:31:58PM +0800, Gary Lin wrote: > From: Hernan Gatta > > To utilize the key protectors framework, there must be a way to protect > full-disk encryption keys in the first place. The grub-protect tool > includes support for the TPM2 key protector but other protectors that >

Re: [PATCH V6] ieee1275/ofdisk: retry on open and read failure

2024-11-05 Thread avnish
On 2024-06-26 16:19, Mukesh Kumar Chaurasiya wrote: Sometimes, when booting from a very busy SAN, the access to the disk can fail and then GRUB will eventually drop to GRUB prompt. This scenario is more frequent when deploying many machines at the same time using the same SAN. This patch aims to

Re: [PATCH v21 33/33] docs: Document TPM2 key protector

2024-11-05 Thread Gary Lin via Grub-devel
On Mon, Nov 04, 2024 at 12:42:19PM -0500, Stefan Berger wrote: > > > On 11/4/24 2:32 AM, Gary Lin via Grub-devel wrote: > > Update the user manual to address TPM2 key protector including the two > > related commands, tpm2_key_protector_init and tpm2_key_protector_clear, > > and the user-space uti

Re: default entry different from timeout entry

2024-11-05 Thread Vladimir 'phcoder' Serbinenko
Le lun. 14 oct. 2024, 00:13, Samuel Thibault a écrit : > Hello, > > For the debian installation CD, when using syslinux we can set an > on-timeout entry which is different from the default entry. This is > quite important because we want sighted people to be able to just press > enter to get the

RE: [External] : Re: [PATCH] Allow background to be set when theme is set

2024-11-05 Thread Alec Brown via Grub-devel
Hey, So a few suggestions. You should use git send-email to send your patch. This will format the patch nicely and make it easier to apply your patch to the rest of the GRUB code. Also, when sending an update of your patch, instead of replying to the initial patch, you should send a separate email

Re: [PATCH v1 14/15] grub-install: install on EFI if forced

2024-11-05 Thread Didier Spaier via Grub-devel
On 11/4/24 02:08, Neal Gompa wrote: > On Thu, Oct 31, 2024 at 3:43 PM Leo Sandoval wrote: >> >> From: Marta Lewandowska >> >> UEFI Secure Boot requires signed grub binaries to work, so grub- >> install should not be used. However, users who have Secure Boot >> disabled and wish to use the command

Re: [PATCH] kern/main: Fix cmdpath in root directory

2024-11-05 Thread Michael Chang via Grub-devel
On Mon, Nov 04, 2024 at 07:15:33PM GMT, Daniel Kiper wrote: > On Fri, Nov 01, 2024 at 10:03:16AM +0800, Michael Chang wrote: > > On Wed, Oct 30, 2024 at 05:12:48PM GMT, Daniel Kiper wrote: > > > Adding Leo... > > > > > > On Tue, Oct 29, 2024 at 03:57:18PM +0800, Michael Chang via Grub-devel > > >