On Sun, Nov 24, 2024 at 03:43:12PM +0100, Heinrich Schuchardt wrote: > > + /* That failed, so try allocating anywhere there's enough room */ > > + status = boot->allocate_pages(EFI_ALLOCATE_ANY_PAGES, EFI_LOADER_DATA, > > pages, &addr); > > + if (status == EFI_SUCCESS) { > > + /* Make sure bootm knows where we loaded the image */ > > + os->load = addr; > > + return; > > + } > > Why don't you simply call LoadImage()?
With secure boot that requires that the kernel image have a trusted signature, whereas we're relying on a signed FIT.