No longer sign i386 kernels

From	Bastian Blank <waldi@debian.org>
Newsgroups	linux.debian.kernel
Subject	No longer sign i386 kernels
Date	2023-12-06 18:20 +0100
Message-ID	<HI3IZ-bKNF-5@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi

I would like do stop signing i386 kernels.

- IA32 UEFI is basically non existent outside of the Apple world and
  maybe some embedded stuff.
- i386 lacks many of the microarchitectural fixes that creeped in during
  the last years.  So those kernels are unsuitable for real world usage
  of processors released in the last ten years.

Install base of a IA32 EFI capable boot chain, as possible to see by
popcon (via grub-efi-ia32-signed): 178

Install base of a X64 EFI capable boot chain (via
grub-efi-amd64-signed): 71743

Bastian

-- 
Military secrets are the most fleeting of all.
		-- Spock, "The Enterprise Incident", stardate 5027.4

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-06 18:20 +0100
  Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-06 22:10 +0100
    Re: No longer sign i386 kernels Pascal Hambourg <pascal@plouf.fr.eu.org> - 2023-12-06 23:50 +0100
      Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-07 00:10 +0100
    Re: No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-10 00:00 +0100

csiph-web