Re: [opensuse-project] UEFI Secure Boot
On 10/08/12 22:59, Greg Freemyer wrote:
On Fri, Aug 10, 2012 at 8:25 AM, Basil Chupin <blchupin@iinet.net.au <mailto:blchupin@iinet.net.au>> wrote:
On 10/08/12 19:44, Vojtech Pavlik wrote:
On Fri, 10 Aug 2012 18:59:26 +1000, Basil Chupin wrote:
My question is: what would happen when one should use - as I did today - a bootable CD like System Rescue Disc? (I am guessing that if this were the openSUSE installation DVD then it would have some code in it which would allow it to boot without problems.)
The openSUSE installation DVD will of course boot, having all the proper signatures that you needed to install the OS in the first place. And it will be booting the kernel present on the DVD, which is signed by the SUSE key.
In case you wanted to create your own rescue DVD that'd be booting custom kernels, that'll be possible, too, using the same shim loader you'll be able to enroll your MOK, or just use one if already present on the system.
Thank you for confirming what I suspected.
My apologies for using the wrong name for the CD I mentioned above, however I was wondering how a bootable CD such as the SystemRescueCD which comes from systemrescuecd.org <http://systemrescuecd.org> (http://www.sysresccd.org/SystemRescueCd_Homepage), and similar bootable media, would boot under this UEFI process?
BC
It was my impression that most UEFI bios solutions would not test CD boot media.
Forcing CD/DVD boot media to be signed with a well known key would end the use of CD/DVD boot media for all but Microsoft I suspect.
(ie. How does the initial openSUSE install get on to a box if install media doesn't have a way around the signing/validation rules.)
The same will also need to apply to USB boot media I hope.
Greg
OK, interesting. Sorry for being 'dense' on this matter but a bootable disc like SystemRescueCD is a Linux bootable disc which loads a system with a kernel and contains many tools to be able to access and alter an existing system installed on an HDD. I even used this disc to remove encryption from my /home directory when an update to openSUSE 12.1 went wrong. Would such a disc be affected by this UEFI? BC -- Using openSUSE 12.2 x86_64 KDE 4.8.4 & kernel 3.5.0-2 on a system with- AMD FX 8-core 3.6/4.2GHz processor 16GB PC14900/1866MHz Quad Channel Corsair "Vengeance" RAM Gigabyte AMD3+ m/board; Gigabyte nVidia GTX550Ti 1GB DDR5 GPU -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Hi all I have translated this into spanish http://www.suse.com/blogs/uefi-secure-boot-plan/ Can I publish in my blog? It's CC ?? I will link the original and will mentioned the author of course would like to translate the other 2 articles about SUSE and UEFI Thank's -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On Friday, August 10, 2012 07:38:34 PM Victor hck wrote:
Hi all
I have translated this into spanish http://www.suse.com/blogs/uefi-secure-boot-plan/ Can I publish in my blog? It's CC ?? I will link the original and will mentioned the author of course would like to translate the other 2 articles about SUSE and UEFI
Thank's
Victorhks, You could watch the license on the lower border of the blog's page [1]. It shows copyrighted. So you could ask permission to publish it or writing an article making reference pointing to the original [1] http://www.suse.com/company/legal/ Regards, -- Ricardo Chung | Panama Linux and FOSS Projects Ambassador openSUSE Project -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Thank's I made a petition in the comments of the article. I will wait an answer... -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 08/10/2012 07:38 PM, Victor hck wrote:
Hi all
I have translated this into spanish http://www.suse.com/blogs/uefi-secure-boot-plan/ Can I publish in my blog? It's CC ?? I will link the original and will mentioned the author of course would like to translate the other 2 articles about SUSE and UEFI
victor, you should ask the authors - only Olaf and Vojtech can say that. I CC'ed them, Andreas -- Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Thank's! I made a petition in comments! -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
participants (4)
-
Andreas Jaeger
-
Basil Chupin
-
Ricardo Chung
-
Victor hck