sig_cloud/diskimage-builder
11
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f0315b4ed4
diskimage-builder/elements
History
Shivanand Tendulker f0315b4ed4 Fix to load only signed kernel in UEFI secure boot 
This fix prevents loading of unsigned ubuntu kernel in UEFI secure
boot environment when image is created using 'iso' element.

'iso' element uses 'linux' and 'initrd' modules of grub2 to load
kernel and initrd respectively. The grub2 implementation of Ubuntu
can load unsigned kernel when these modules are used.

Ubuntu has Grub2 modules 'linuxefi' and 'initrdefi' which exits
boot process if unsigned kernel is used in UEFI secure boot mode.
The 'iso' element should use these modules in grub.cfg to prevent
loading of unsigned kernel when node is booted in the UEFI secure
boot environment.

'linuxefi' and 'initrdefi' works seamlessly when node is booted in
normal UEFI boot mode (non-secure).

Fedora do not have this issue. This fix has been tested in Fedora
environment. It works fine.

Closes-Bug: 1443114
Change-Id: If256ba1f7d7c149482d0f37fabcdfa8ed22e3f91
2015-04-13 13:20:12 +00:00
..
apt-conf Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
apt-preferences Merge "Fix unbound variables in apt-{preferences,sources}" 2015-03-04 02:49:34 +00:00
apt-sources Improved apt-sources README 2015-04-07 23:05:38 +00:00
architecture-emulation-binaries Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
baremetal Add element ubuntu-signed to provide signed kernel 2015-04-12 11:36:17 -07:00
base Merge "Split dib-init-system into its own element" 2015-04-01 20:35:04 +00:00
cache-url Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
centos CentOS 6 Element 2015-03-03 23:09:45 -08:00
centos7 Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
centos-minimal Convert leftover unconditional set -x to DIB_DEBUG_TRACE 2015-03-11 14:58:14 +01:00
cleanup-kernel-initrd Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
cloud-init-datasources Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
cloud-init-nocloud Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
debian Convert leftover unconditional set -x to DIB_DEBUG_TRACE 2015-03-11 14:58:14 +01:00
debian-systemd Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
debian-upstart Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
deploy Create docs site containing element READMEs 2015-02-10 11:45:35 -08:00
deploy-baremetal Create docs site containing element READMEs 2015-02-10 11:45:35 -08:00
deploy-ironic Merge "Report status of boot loader installation to Ironic" 2015-04-02 13:07:40 +00:00
deploy-kexec Create docs site containing element READMEs 2015-02-10 11:45:35 -08:00
deploy-targetcli No markdown docs for elements 2015-04-02 23:55:19 +00:00
deploy-tgtadm No markdown docs for elements 2015-04-02 23:55:19 +00:00
dhcp-all-interfaces Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
dib-init-system Split dib-init-system into its own element 2015-03-25 13:28:38 -04:00
dib-run-parts/root.d Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
disable-selinux/post-install.d Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
dkms Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
dpkg Merge "Allow disabling apt-get clean" 2015-03-17 18:20:11 +00:00
dracut-network Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
dracut-ramdisk Refactor deploy ramdisk to allow use of targetcli 2015-03-18 11:42:00 -05:00
element-manifest Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
enable-serial-console Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
epel Merge "Standarise tracing for scripts" 2015-03-04 00:38:44 +00:00
fedora Fedora: install redhat-rpm-config 2015-03-18 08:25:18 -04:00
hwburnin Create docs site containing element READMEs 2015-02-10 11:45:35 -08:00
hwdiscovery Create docs site containing element READMEs 2015-02-10 11:45:35 -08:00
ilo Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
install-static Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
ironic-agent ironic-agent: exclude content of /tmp from initramfs 2015-03-10 19:03:04 +01:00
ironic-discoverd-ramdisk Fix incorrect package name dmidecoded to dmidecode 2015-03-11 01:04:37 +00:00
iso Fix to load only signed kernel in UEFI secure boot 2015-04-13 13:20:12 +00:00
local-config Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
manifests Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
mellanox Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
modprobe-blacklist Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
opensuse Merge "openSUSE update" 2015-03-20 09:34:15 +00:00
package-installs Fix check for installtype 2015-03-10 21:59:03 -04:00
pip-cache Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
pkg-map CentOS 6 Element 2015-03-03 23:09:45 -08:00
pypi Merge "Standarise tracing for scripts" 2015-03-04 00:38:44 +00:00
ramdisk Add element ubuntu-signed to provide signed kernel 2015-04-12 11:36:17 -07:00
ramdisk-base Refactor deploy ramdisk to allow use of targetcli 2015-03-18 11:42:00 -05:00
rax-nova-agent Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
redhat-common Run udevadm settle after kpartx -l 2015-03-23 10:38:21 +01:00
rhel Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
rhel7 Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
rhel-common Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
rpm-distro Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
select-boot-kernel-initrd Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
selinux-permissive Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
serial-console Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
source-repositories Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
stable-interface-names Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
svc-map Run svc-map tests 2015-03-29 04:11:41 +00:00
uboot Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
ubuntu Set DIB_RELEASE in ubuntu element 2015-03-04 23:11:27 +00:00
ubuntu-core Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
ubuntu-minimal Merge "Flagging ubuntu-minimal as untested" 2015-03-20 09:00:16 +00:00
ubuntu-signed Add element ubuntu-signed to provide signed kernel 2015-04-12 11:36:17 -07:00
vm Merge "Add no_timer_check to vm grub cmdline" 2015-03-20 13:05:03 +00:00
yum Standarise tracing for scripts 2015-02-12 10:41:32 +11:00
zypper Standarise tracing for scripts 2015-02-12 10:41:32 +11:00