Bug 28351 - UEFI SB would reject unsigned kernels
Summary: UEFI SB would reject unsigned kernels
Status: CLOSED WORKSFORME
Alias: None
Product: Sisyphus
Classification: Development
Component: refind (show other bugs)
Version: unstable
Hardware: all Linux
: P3 normal
Assignee: Anton Farygin
QA Contact: qa-sisyphus
URL: http://www.rodsbooks.com/refind/secur...
Keywords:
Depends on:
Blocks:
 
Reported: 2013-01-14 21:26 MSK by Michael Shigorin
Modified: 2013-02-25 23:28 MSK (History)
5 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Shigorin 2013-01-14 21:26:25 MSK 
refind-0.6.4 boots the kernel in a way that precludes an unsigned vmlinuz from being successfully booted if shim-signed is used to start refind itself and SecureBoot is not disabled; elilo-3.14 works just fine in the same environment.

Reported upstream.
Comment 1 Michael Shigorin 2013-02-25 23:28:16 MSK 
Worked around by booting ELILO instead (it's even not complete nonsense since refind is a boot manager and elilo is a boot loader ;-).

http://git.altlinux.org/people/mike/packages/?p=mkimage.git;a=commitdiff;h=8a44277df8912acb7832192fb816692b2857fb18