On Fri, Mar 18, 2016 at 02:45:22PM +0300, Andrei Borzenkov wrote:
On Fri, Mar 18, 2016 at 1:50 PM, Michael Chang <mchang@suse.com> wrote:
Hi All,
In the past we used to provide trustedgrub package in conjuction with legacy grub to support the TPM device and also the measure boot process. But after we migrated from grub to grub2, we dropped trustedgrub support from YaST because it's configuration and setup no longer compatible with grub2 that provides general and unified process for us to setup bootloader on all supported architectures.
Now that with TrustedGrub2 project it's back. :) And we can craft it with the same setup tools and configuration files from grub2 packages so that integration with existing system management tools like YaST become easy. The new package actually only contains it's i386-pc modules can be installed by grub2-install to your system plus some text (README, HOWTO etc) files as another package.
More information at : https://github.com/Sirrix-AG/TrustedGRUB2
It seems to be based still on beta2; any plans to rebase?
The versioning is planned to follow TrustedGrub2 as vendor for those modules to falicitate communication if any such needs arise. The 1.4.0 is their latest release tag. Neverthelast We could send a pull request to them for bumping new version rebased on (incoming) beta3 of course.
Do you propose to replace grub2-i386-pc package with trusted grub2?
No. I think the plan is it will only be a replacement for legacy TrustedGrub1 that will get installed if integrated into YaST for platform supporting TPM and user explicitly as for it via a checkbox (default OFF). Thanks, Michael
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org