joeyli wrote:
於 一，2013-04-01 於 20:28 -0700，Greg KH 提到：
On Tue, Apr 02, 2013 at 10:58:54AM +0800, joeyli wrote:
於 一，2013-04-01 於 19:37 -0700，Greg KH 提到：
On Tue, Apr 02, 2013 at 10:23:21AM +0800, joeyli wrote:
Hi Greg, 於 一，2013-04-01 於 19:13 -0700，Greg KH 提到：
On Tue, Apr 02, 2013 at 10:04:35AM +0800, Lee, Chun-Yi wrote: > Patch-mainline: v3.8-rc1..v3.9-rc2 > Target: openSUSE 12.3 > Test steps: > + build; make modules_install; make install > + mount -t efivarfs none /sys/firmware/efi/efivars/ > or create file > /lib/systemd/system/sys-firmware-efi-efivars.mount [1] > + ls /sys/firmware/efi/efivars will show up all EFI variables > + Try the small create[2]/delete[3] programs from Gary Lin > The create program will create a EFI variable is TestVar, then we can see it show up > in /sys/firmware/efi/efivars. And, delete program can remove it.
Why are these patches being proposed? Why is this feature needed in the 3.7 openSUSE kernel, after it has been released in 12.3? 13.1 will have a newer kernel, so this isn't needed there.
Ludwig created a openSUSE bug, bnc#808680, we need the above 33 patches to enable efi variable filesystem for support MOK.
So we don't support MOK now, but you are going to change this in an update to 12.3 somehow? That sounds like a 13.1 feature to me, how can we add this to 12.3 so late?
Sorry for I didn't aware the mokutil was added in openSUSE 12.3 repo. If anyone install mokutil from repo, then it doesn't work unless kernel support EFI variable filesystem.
But why would someone even try to use mokutil with the 12.3 kernel as it isn't supported?
I checked with Gary Lin for the relationship between shim with mokutil, actually, no correlation between them unless we want support MOK. I don' t know why mokutil was pushed to 12.3 repo if we don't support MOK in openSUSE 12.3
We have secure boot support in 12.3. The discussion in the bug report indicates that mokutil is needed to tell shim to call MokManager. Which in turn must be run to enroll custom keys for booting kernels signed with a key other than the openSUSE one. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kernel+owner@opensuse.org