Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #81083

Re: No longer sign i386 kernels

From Pascal Hambourg <pascal@plouf.fr.eu.org>
Newsgroups linux.debian.kernel
Subject Re: No longer sign i386 kernels
Date 2023-12-06 23:50 +0100
Message-ID <HI8Sl-bOMe-5@gated-at.bofh.it> (permalink)
References <HI3IZ-bKNF-5@gated-at.bofh.it> <HI7jz-bNXM-5@gated-at.bofh.it>
Organization Plouf !

Show all headers | View raw


Hello,

On 06/12/2023 at 22:09, Steve McIntyre wrote:
> 
> On Wed, Dec 06, 2023 at 06:01:17PM +0100, Bastian Blank wrote:
>>
>> I would like do stop signing i386 kernels.
>>
>> - IA32 UEFI is basically non existent outside of the Apple world and
>>   maybe some embedded stuff.
(...)
> there's no point in signing i386 grub and fwupd or
> having a signed shim if we don't have a signed kernel.

Over the years I have seen a number of netbook or tablet-style PCs with 
32-bit UEFI firmware and a 64-bit capable CPU, so they could boot with 
grub-efi-ia32 and an amd64 kernel. I do not remember if they supported 
secure boot though.

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-06 18:20 +0100
  Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-06 22:10 +0100
    Re: No longer sign i386 kernels Pascal Hambourg <pascal@plouf.fr.eu.org> - 2023-12-06 23:50 +0100
      Re: No longer sign i386 kernels Steve McIntyre <steve@einval.com> - 2023-12-07 00:10 +0100
    Re: No longer sign i386 kernels Bastian Blank <waldi@debian.org> - 2023-12-10 00:00 +0100

csiph-web