Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-17 Thread Trammell Hudson
On Thursday, September 17, 2020 11:26 AM, Jan Beulich wrote: > On 17.09.2020 16:05, Trammell Hudson wrote: > > If we have a way to detect a unified image early enough, then > > we can avoid the backwards incompatibility if it is not unified. > > I was assuming this was easily possible, if necessar

Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-17 Thread Jan Beulich
On 17.09.2020 16:05, Trammell Hudson wrote: > On Thursday, September 17, 2020 8:51 AM, Jan Beulich > wrote: >> On 14.09.2020 13:50, Trammell Hudson wrote: >>> If secure boot is enabled, the Xen command line arguments are ignored. >>> If a unified Xen image is used, then the bundled configuration,

Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-17 Thread Trammell Hudson
On Thursday, September 17, 2020 8:51 AM, Jan Beulich wrote: > On 14.09.2020 13:50, Trammell Hudson wrote: > > If secure boot is enabled, the Xen command line arguments are ignored. > > If a unified Xen image is used, then the bundled configuration, dom0 > > kernel, and initrd are prefered over the

Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-17 Thread Jan Beulich
On 14.09.2020 13:50, Trammell Hudson wrote: > If secure boot is enabled, the Xen command line arguments are ignored. > If a unified Xen image is used, then the bundled configuration, dom0 > kernel, and initrd are prefered over the ones listed in the config file. > > Unlike the shim based verificat

Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-16 Thread Roger Pau Monné
On Mon, Sep 14, 2020 at 07:50:13AM -0400, Trammell Hudson wrote: > If secure boot is enabled, the Xen command line arguments are ignored. > If a unified Xen image is used, then the bundled configuration, dom0 > kernel, and initrd are prefered over the ones listed in the config file. I understand t

Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-16 Thread Jan Beulich
On 16.09.2020 10:50, Trammell Hudson wrote: > On Wednesday, September 16, 2020 3:45 AM, Roger Pau Monné > wrote: >> On Mon, Sep 14, 2020 at 07:50:13AM -0400, Trammell Hudson wrote: >>> If secure boot is enabled, the Xen command line arguments are ignored. >>> If a unified Xen image is used, then

Re: [PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-16 Thread Trammell Hudson
On Wednesday, September 16, 2020 3:45 AM, Roger Pau Monné wrote: > On Mon, Sep 14, 2020 at 07:50:13AM -0400, Trammell Hudson wrote: > > If secure boot is enabled, the Xen command line arguments are ignored. > > If a unified Xen image is used, then the bundled configuration, dom0 > > kernel, and i

[PATCH v4 4/4] efi: Do not use command line if secure boot is enabled.

2020-09-14 Thread Trammell Hudson
If secure boot is enabled, the Xen command line arguments are ignored. If a unified Xen image is used, then the bundled configuration, dom0 kernel, and initrd are prefered over the ones listed in the config file. Unlike the shim based verification, the PE signature on a unified image covers the al