Re: Fwd: Re: [opensuse-project] UEFI Secure Boot
On Fri, 10 Aug 2012 18:59:26 +1000, Basil Chupin wrote:
My question is: what would happen when one should use - as I did today - a bootable CD like System Rescue Disc? (I am guessing that if this were the openSUSE installation DVD then it would have some code in it which would allow it to boot without problems.)
The openSUSE installation DVD will of course boot, having all the proper signatures that you needed to install the OS in the first place. And it will be booting the kernel present on the DVD, which is signed by the SUSE key. In case you wanted to create your own rescue DVD that'd be booting custom kernels, that'll be possible, too, using the same shim loader you'll be able to enroll your MOK, or just use one if already present on the system. -- Vojtech Pavlik Director SuSE Labs -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 08/10/2012 11:44 AM, Vojtech Pavlik wrote:
On Fri, 10 Aug 2012 18:59:26 +1000, Basil Chupin wrote:
My question is: what would happen when one should use - as I did today - a bootable CD like System Rescue Disc? (I am guessing that if this were the openSUSE installation DVD then it would have some code in it which would allow it to boot without problems.)
The openSUSE installation DVD will of course boot, having all the proper signatures that you needed to install the OS in the first place. And it will be booting the kernel present on the DVD, which is signed by the SUSE key.
Vojtech, would this apply to the current openSUSE 12.1 - or are you speaking about future releases that have all of this included?
In case you wanted to create your own rescue DVD that'd be booting custom kernels, that'll be possible, too, using the same shim loader you'll be able to enroll your MOK, or just use one if already present on the system.
Andreas -- Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On Fri, Aug 10, 2012 at 12:27:47PM +0200, Andreas Jaeger wrote:
On 08/10/2012 11:44 AM, Vojtech Pavlik wrote:
On Fri, 10 Aug 2012 18:59:26 +1000, Basil Chupin wrote:
My question is: what would happen when one should use - as I did today - a bootable CD like System Rescue Disc? (I am guessing that if this were the openSUSE installation DVD then it would have some code in it which would allow it to boot without problems.)
The openSUSE installation DVD will of course boot, having all the proper signatures that you needed to install the OS in the first place. And it will be booting the kernel present on the DVD, which is signed by the SUSE key.
Vojtech, would this apply to the current openSUSE 12.1 - or are you speaking about future releases that have all of this included?
Of course only about future implementation, we don't have any signatures on openSUSE 12.1 and thus it won't work with Secure Boot enabled. -- Vojtech Pavlik Director SuSE Labs -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 10/08/12 19:44, Vojtech Pavlik wrote:
On Fri, 10 Aug 2012 18:59:26 +1000, Basil Chupin wrote:
My question is: what would happen when one should use - as I did today - a bootable CD like System Rescue Disc? (I am guessing that if this were the openSUSE installation DVD then it would have some code in it which would allow it to boot without problems.) The openSUSE installation DVD will of course boot, having all the proper signatures that you needed to install the OS in the first place. And it will be booting the kernel present on the DVD, which is signed by the SUSE key.
In case you wanted to create your own rescue DVD that'd be booting custom kernels, that'll be possible, too, using the same shim loader you'll be able to enroll your MOK, or just use one if already present on the system.
Thank you for confirming what I suspected. My apologies for using the wrong name for the CD I mentioned above, however I was wondering how a bootable CD such as the SystemRescueCD which comes from systemrescuecd.org (http://www.sysresccd.org/SystemRescueCd_Homepage), and similar bootable media, would boot under this UEFI process? BC -- Using openSUSE 12.2 x86_64 KDE 4.8.4 & kernel 3.5.0-2 on a system with- AMD FX 8-core 3.6/4.2GHz processor 16GB PC14900/1866MHz Quad Channel Corsair "Vengeance" RAM Gigabyte AMD3+ m/board; Gigabyte nVidia GTX550Ti 1GB DDR5 GPU -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
participants (3)
-
Andreas Jaeger -
Basil Chupin -
Vojtech Pavlik