Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #81083

Re: No longer sign i386 kernels

Path csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From Pascal Hambourg <pascal@plouf.fr.eu.org>
Newsgroups linux.debian.kernel
Subject Re: No longer sign i386 kernels
Date Wed, 06 Dec 2023 23:50:01 +0100
Message-ID <HI8Sl-bOMe-5@gated-at.bofh.it> (permalink)
References <HI3IZ-bKNF-5@gated-at.bofh.it> <HI7jz-bNXM-5@gated-at.bofh.it>
X-Mailbox-Line From debian-kernel-request@lists.debian.org Wed Dec 6 22:45:17 2023
Old-Return-Path <pascal@plouf.fr.eu.org>
X-Amavis-Spam-Status No, score=-6.91 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
MIME-Version 1.0
User-Agent Mozilla Thunderbird
Content-Language en-US
Organization Plouf !
Content-Type text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding 7bit
X-Mailing-List <debian-kernel@lists.debian.org> archive/latest/140858
List-ID <debian-kernel.lists.debian.org>
List-URL <https://lists.debian.org/debian-kernel/>
List-Archive https://lists.debian.org/msgid-search/fd020349-ee21-4881-8514-7039dd452e98@plouf.fr.eu.org
Approved robomod@news.nic.it
Lines 18
Sender robomod@news.nic.it
X-Original-Date Wed, 6 Dec 2023 23:44:52 +0100
X-Original-Message-ID <fd020349-ee21-4881-8514-7039dd452e98@plouf.fr.eu.org>
X-Original-References <20231206170117.pxacopzva2mvgrvo@shell.thinkmo.de> <20231206210901.GP3744154@tack.einval.com>
Xref csiph.com linux.debian.kernel:81083

Show key headers only | View raw


Hello,

On 06/12/2023 at 22:09, Steve McIntyre wrote:
> 
> On Wed, Dec 06, 2023 at 06:01:17PM +0100, Bastian Blank wrote:
>>
>> I would like do stop signing i386 kernels.
>>
>> - IA32 UEFI is basically non existent outside of the Apple world and
>>   maybe some embedded stuff.
(...)
> there's no point in signing i386 grub and fwupd or
> having a signed shim if we don't have a signed kernel.

Over the years I have seen a number of netbook or tablet-style PCs with 
32-bit UEFI firmware and a 64-bit capable CPU, so they could boot with 
grub-efi-ia32 and an amd64 kernel. I do not remember if they supported 
secure boot though.

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-06 18:20 +0100
  Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-06 22:10 +0100
    Re: No longer sign i386 kernels Pascal Hambourg <pascal@plouf.fr.eu.org> - 2023-12-06 23:50 +0100
      Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-07 00:10 +0100
    Re: No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-10 00:00 +0100

csiph-web