Page MenuHomeVyOS Platform
Create Task
Maniphest T9496

Prevent installing non-signed image when system is booted in UEFI secure-boot mode
Open, NormalPublicFEATURE REQUEST
Actions

Description

When VyOS runs as UEFI secure-boot signed system, installing an image which is not signed is possible.

Rebooting into this image will fail as long as UEFI secure-boot support is installed. The installer should check if the new image is secure-boot signed or not. If it is not signed, it should reject the image installation like we already do for non matching flavors.

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedFEATURE REQUESTNoneT858 Full UEFI support
 ResolvedFEATURE REQUESTc-poT861 add secure boot support
 OpenFEATURE REQUESTc-poT9496 Prevent installing non-signed image when system is booted in UEFI secure-boot mode

Event Timeline

c-po created this task.Tue, Oct 20, 6:59 PM
c-po triaged this task as Normal priority.
c-po created this object with edit policy "Custom Policy".