mirror of
https://github.com/flatcar/scripts.git
synced 2025-10-21 20:31:48 +02:00
This will not be enabled by default, and still requires the "lockdown" kernel parameter. Users can test by setting in `/usr/share/oem/grub.cfg`: ``` set linux_append="lockdown=integrity" ``` After this is set, dmesg output you'll see: ``` [ 0.000000] Kernel is locked down from command line; see man kernel_lockdown.7 ``` Signed-off-by: Vincent Batts <vbatts@kinvolk.io>