Re: F39 Change Proposal: Clean Systemd-boot installs (Self-Contained_

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Jun 22, 2023 at 04:59:38PM +0100, Aoife Moloney wrote:
> https://fedoraproject.org/wiki/Changes/cleanup_systemd_install
> 
> This document represents a proposed Change. As part of the Changes
> process, proposals are publicly announced in order to receive
> community feedback. This proposal will only be implemented if approved
> by the Fedora Engineering Steering Committee.
> 
> == Summary ==
> Fedora default installs with a shim + grub bootloader on EFI
> platforms, yet has been shipping systemd-boot in various forms for a
> number of releases. There are a few howto's which describe how to
> replace grub with systemd-boot with varying levels of functionality.
> This should be easier with a formalized default method that can be
> built upon. This proposal aims to complete the work started with
> anaconda (inst.sdboot), kickstart (bootloader --sdboot) such that the
> "everything" media can install a grub free machine.

snip

> Beyond that there are various enhancements which can be made to remove
> the /boot partition (leaving the EFI at /boot/efi), enrolling fedora
> keys if the secure boot mode is "Setup", adding options to enable
> shim+systemd-boot, assuring that there is a systemd-boot-signed
> package, etc.

This is the $million question to - is there any proposal and/or agreement
by relevant maintainers, to start signing systemd-boot with Fedora SecureBoot
certs yet ? Without that, sdboot looks destined to remain a niche use case.

If that's part of this proposal, then it feels more like a system-wide
change, than self-contained.

With regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux