4 ms·
> a secure boot setup is much more difficult this way. Is it? Don't you just sign the bootable kernel image that already has the initrd and command-line built
by qu4z-2 4y ago
> a secure boot setup is much more difficult this way.
Is it? Don't you just sign the bootable kernel image that already has the initrd and command-line built in?
Oh, I guess if you're using Microsoft as a CA I can see why that would be tricky.
- still_grokking 4y agoI think this is a misunderstanding. I've said secure boot is much more difficult in case kernel and initrd are separate. In case of a UKI it's very simple of course. Just sign the boot image. That's why I love the UKI. :-)