Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #81084

Re: No longer sign i386 kernels

From Steve McIntyre <steve@einval.com>
Newsgroups linux.debian.kernel
Subject Re: No longer sign i386 kernels
Date 2023-12-07 00:10 +0100
Message-ID <HI9bH-bP8f-3@gated-at.bofh.it> (permalink)
References <HI3IZ-bKNF-5@gated-at.bofh.it> <HI7jz-bNXM-5@gated-at.bofh.it> <HI8Sl-bOMe-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Wed, Dec 06, 2023 at 11:44:52PM +0100, Pascal Hambourg wrote:
>Hello,
>
>On 06/12/2023 at 22:09, Steve McIntyre wrote:
>> 
>> On Wed, Dec 06, 2023 at 06:01:17PM +0100, Bastian Blank wrote:
>> > 
>> > I would like do stop signing i386 kernels.
>> > 
>> > - IA32 UEFI is basically non existent outside of the Apple world and
>> >   maybe some embedded stuff.
>(...)
>> there's no point in signing i386 grub and fwupd or
>> having a signed shim if we don't have a signed kernel.
>
>Over the years I have seen a number of netbook or tablet-style PCs with
>32-bit UEFI firmware and a 64-bit capable CPU, so they could boot with
>grub-efi-ia32 and an amd64 kernel. I do not remember if they supported secure
>boot though.

Some of them did, but at this point the most recent of those Bay Trail
netbooks is heading for a decade old. They were designed to be very
cheap, which means very few will have survived this long. We're not
proposing to kill support *altogether*, but SB isn't a priority here
for such old machines IMHO.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
“Why do people find DNS so difficult? It’s just cache invalidation and
 naming things.”
   -– Jeff Waugh (https://twitter.com/jdub)

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-06 18:20 +0100
  Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-06 22:10 +0100
    Re: No longer sign i386 kernels Pascal Hambourg <pascal@plouf.fr.eu.org> - 2023-12-06 23:50 +0100
      Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-07 00:10 +0100
    Re: No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-10 00:00 +0100

csiph-web