mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2026-03-04 21:11:43 +01:00
Code Issues Packages Projects Releases Wiki Activity

build_library: grub: Bring back linuxefi to stabilize PCR4

Browse Source 
With grubs linux command, the kernel image is measured to PCR4 when SecureBoot
is enabled but not measured when SecureBoot is enabled. I don't think is
intentional, since SecureBoot state is measured to PCR7. Try to switch to
linuxefi again, since we're back on the common rhboot grub codebase.
This commit is contained in:
Jeremi Piotrowski 2026-02-20 12:13:49 +01:00
parent cb972ccd23
commit 7e80c4cc4e
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
build_library/grub.cfg
View File

@ -94,6 +94,12 @@ if [ "$grub_cpu" = arm64 ]; then
fi
set suf=""
# UEFI uses linuxefi/initrdefi instead of linux/initrd except for arm64
if [ "$grub_platform" = efi ]; then
if [ "$grub_cpu" != arm64 ]; then
set suf="efi"
fi
fi
# Assemble the options applicable to all the kernels below
set linux_cmdline="rootflags=rw mount.usrflags=ro consoleblank=0 $linux_root $linux_console $first_boot $randomize_disk_guid $extra_options $oem $linux_append"