Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add extra config line for UEFI with ReaR to work #250

Merged
merged 2 commits into from
Sep 8, 2022

Conversation

tahliar
Copy link
Collaborator

@tahliar tahliar commented Sep 6, 2022

Description

Added SECURE_BOOT_BOOTLOADER="/boot/efi/EFI/BOOT/shim.efi" to UEFI list item in ReaR chapter.

Backports

  • To maintenance/SLEHA15SP4
  • To maintenance/SLEHA15SP3
  • To maintenance/SLEHA15SP2
  • To maintenance/SLEHA15SP1
  • To maintenance/SLEHA15
  • To maintenance/SLEHA12SP5
  • To maintenance/SLEHA12SP4

References

jsc#DOCTEAM-733
bsc#1203051

@tahliar
Copy link
Collaborator Author

tahliar commented Sep 6, 2022

UEFI item now looks like this:

rear-uefi

Copy link

@jsmeix jsmeix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tahliar
there are two related but separated cases when a system boots with a UEFI boot loader:
With and without Secure Boot.
The previous text only described the case when a system boots with a UEFI boot loader without Secure Boot.
I suggest to add a separated text when a system boots with a UEFI boot loader with additional Secure Boot.
E.g. something like

* When your system is booted with UEFI.
  If your system boots with a UEFI boot loader,
  install the package ebiso
  and add the following line
  into /etc/rear/local.conf:
    ISO_MKISOFS_BIN="/usr/bin/ebiso"
  If your system boots with UEFI and Secure Boot
  additionally add the following line
  into /etc/rear/local.conf:
    SECURE_BOOT_BOOTLOADER="/boot/efi/EFI/sles/shim.efi"
  In general regarding boot loader
  see the various ReaR configuration variables
  about BOOTLOADER, UEFI and SECURE_BOOT
  in /usr/share/rear/conf/default.conf
  e.g. USING_UEFI_BOOTLOADER and others.

According to
https://en.wikipedia.org/wiki/UEFI#SECURE-BOOT
and
https://en.wikipedia.org/wiki/UEFI#Secure_Boot_criticism
the spelling is 'Secure Boot' (i.e. capitalized).

@tahliar
Copy link
Collaborator Author

tahliar commented Sep 7, 2022

@tahliar there are two related but separated cases when a system boots with a UEFI boot loader: With and without Secure Boot. The previous text only described the case when a system boots with a UEFI boot loader without Secure Boot. I suggest to add a separated text when a system boots with a UEFI boot loader with additional Secure Boot. E.g. something like

* When your system is booted with UEFI.
  If your system boots with a UEFI boot loader,
  install the package ebiso
  and add the following line
  into /etc/rear/local.conf:
    ISO_MKISOFS_BIN="/usr/bin/ebiso"
  If your system boots with UEFI and Secure Boot
  additionally add the following line
  into /etc/rear/local.conf:
    SECURE_BOOT_BOOTLOADER="/boot/efi/EFI/sles/shim.efi"
  In general regarding boot loader
  see the various ReaR configuration variables
  about BOOTLOADER, UEFI and SECURE_BOOT
  in /usr/share/rear/conf/default.conf
  e.g. USING_UEFI_BOOTLOADER and others.

According to https://en.wikipedia.org/wiki/UEFI#SECURE-BOOT and https://en.wikipedia.org/wiki/UEFI#Secure_Boot_criticism the spelling is 'Secure Boot' (i.e. capitalized).

Thank you! I will add this in.

@tahliar
Copy link
Collaborator Author

tahliar commented Sep 7, 2022

New version:

Screenshot from 2022-09-07 14-03-55

@tahliar tahliar requested a review from jsmeix September 7, 2022 04:04
Copy link

@jsmeix jsmeix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

@tahliar tahliar merged commit 29de3ee into main Sep 8, 2022
@tahliar tahliar deleted the DOCTEAM-733-rear-secure-boot branch September 8, 2022 01:03
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
tahliar added a commit that referenced this pull request Sep 8, 2022
* Add extra config line for UEFI with ReaR to work

jsc#DOCTEAM-733
bsc#1203051

* Add Secure Boot to UEFI ReaR config
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants