[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c19 --- Comment #19 from Joey Lee <jlee@suse.com> --- (In reply to Joey Lee from comment #15)
A f88814cc25 patch be introduced to v5.8 kernel to set flag to read only if SetVariable not be supported by firmware:
commit f88814cc2578c121e6edef686365036db72af0ed [v5.8-rc7~14] Author: Ard Biesheuvel <ardb@kernel.org> Date: Wed Jul 8 13:01:57 2020 +0300
efi/efivars: Expose RT service availability via efivars abstraction
fs/efivarfs/super.c static int efivarfs_fill_super(struct super_block *sb, struct fs_context *fc) { ... if (!efivar_supports_writes()) sb->s_flags |= SB_RDONLY; ...
Kernel detected the EFI runtime properties table, and set s_flags to read only. It can block the writing job from userland. But it doesn't expose "Read Only" property to userland. By the way, I was sent patch to upstream for creating efivars mount point when efivarfs is available: https://lore.kernel.org/lkml/20200924095157.GA304421@kroah.com/T/#m1442b0ab6... Follow Greg's suggestion, we use /proc/filesystems to detect the existence of efivarfs in userland. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com