On Fri, 18 Mar 2016 12:45, Andrei Borzenkov wrote:
On Fri, Mar 18, 2016 at 1:50 PM, Michael Chang wrote:
Hi All,
In the past we used to provide trustedgrub package in conjuction with legacy grub to support the TPM device and also the measure boot process. But after we migrated from grub to grub2, we dropped trustedgrub support from YaST because it's configuration and setup no longer compatible with grub2 that provides general and unified process for us to setup bootloader on all supported architectures.
Now that with TrustedGrub2 project it's back. :) And we can craft it with the same setup tools and configuration files from grub2 packages so that integration with existing system management tools like YaST become easy. The new package actually only contains it's i386-pc modules can be installed by grub2-install to your system plus some text (README, HOWTO etc) files as another package.
More information at : https://github.com/Sirrix-AG/TrustedGRUB2
It seems to be based still on beta2; any plans to rebase?
Do you propose to replace grub2-i386-pc package with trusted grub2?
That woud be stupid, period. And shortsighted, flamewar inductive. Not everone using grub2-i386-pc wants the hassle of TPM related stuff. For me TrustedGRUB2 becomes really interesting when it supports UEFI and x86_64 als well as GPT. That is where the (industrial) world of today is. UEFI AND 64 Bit AND TPM is what is asked in the specs of many projects, not OR, and GPT is on the wishlist for many of them. ATM this is a forced selling point of M$ Windows. TrustedGRUB2 1.4.0 is (atm) limited to leagacy BIOS, mbr, 32 bit. Still, it is a very good start, and I'll keep an eye on that. - Yamaban. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org