For certain deployments, it will be great to have secure boot support
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | FEATURE REQUEST | None | T858 Full UEFI support | ||
| Resolved | FEATURE REQUEST | c-po | T861 add secure boot support | ||
| Resolved | FEATURE REQUEST | c-po | T7126 Generate custom version of shim | ||
| Open | FEATURE REQUEST | c-po | T9496 Prevent installing non-signed image when system is booted in UEFI secure-boot mode |
@SteveP no. This would require us to give you HSM access for signing modules, which is not possible.
Compiling a custom kernel is not necessary. Either supply a PR so we can integrate those realtek drivers if needed - which are those? Or disable module signature verification on the Kernel cmdline.
Hi,
That's as I thought so that's fine.
There is nothing special about the driver I'm running. Sometimes I just want to run a newer one before you get around to it. However, the driver does encounter this race condition https://vyos.dev/T6856 and I get around it by loading the driver like this:
dpkg -i --path-exclude=/etc/udev/rules.d/50-usb-realtek-net.rules /opt/vyatta/etc/config/user-data/vyos-drivers-realtek-r8152_$new_mod_ver-1_amd64.deb
SteveP
Added repo to build VyOS custom shim-signed Debian package from repo https://github.com/vyos/shim-signed/ with our own signed SHIM.