11816 2017-07-20 18:22:58 +0000 secure boot implementation using systemd-boot bootloader 2025-10-06 17:08:11 +0000 1 1 7 Build System, Metadata & Runtime BSPs bsps-meta-intel unspecified x86 Multiple NEW Medium+ enhancement 5.99 1 california.l.sullivan unassigned andrew.bradford anuj.mittal bluelightning ccasciato tim.orling --- --- Don't know oldest_to_newest 75205 0 california.l.sullivan 2017-07-20 18:22:58 +0000 It should be possible to support secure boot with systemd-boot as the bootloader. Systemd-boot can be signed, and when in secure boot mode will validate that the kernel is also signed. This is a minimal secure boot implementation, with the downside that the chain of trust only extends as far as the kernel. Neither the initrd or kernel command line will be validated, making it fairly easy to defeat. There also seems to be recent work getting systemd-boot to work with the shim program, which is prevalent in other secure boot implementations on the Linux side: https://github.com/systemd/systemd/pull/5702/commits/40a2f0684749dffcc2ae076137264354683333d8 79598 1 robin.l.jordan 2018-02-26 20:28:08 +0000 Please provide an update on the status of this and let me know if it will be ready for YP 2.5 M3. 79599 2 california.l.sullivan 2018-02-26 20:29:23 +0000 Thought Stephano was going bump this to 2.6 for me. Doing it now. 96955 3 randy.macleod 2023-10-24 14:24:50 +0000 Bulk move from 4.99 or 0.00 to 5.99