summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2018-08-21 14:43:12 -0400
committerPeter Jones <pjones@redhat.com>2021-02-15 17:20:05 -0500
commit545b4a194f2684bf6770e4f5d7574ebf050d3429 (patch)
tree204ccd9670314e4d9d98a164786fc2eff212a1f7
parentd211ab2435dad02311b4f8e204491d42638d4aec (diff)
downloadefi-boot-shim-545b4a194f2684bf6770e4f5d7574ebf050d3429.tar.gz
efi-boot-shim-545b4a194f2684bf6770e4f5d7574ebf050d3429.zip
Add mm/fb hashing to TODO, put that and related things under 'Reproducible builds'
-rw-r--r--TODO9
1 files changed, 6 insertions, 3 deletions
diff --git a/TODO b/TODO
index bdfab075..d7c73344 100644
--- a/TODO
+++ b/TODO
@@ -22,11 +22,14 @@
- make debuginfo paths configurable
- make arch dependent names configurable
- Make it easier to avoid CryptPem
-- Make an easy strip+implant tool for our embedded cert lists
- Post process full path names out of __FILE__ / __BASE_FILE__ entries in
the string table :/
-- Make build.log an artifact of building.
-- KEK for Mok. (koike expressed an interest in working on this.)
+- Reproducible builds:
+ - Make build.log an artifact of building.
+ - KEK for Mok. (koike expressed an interest in working on this.)
+ - Reorder builds to take hashes of mm, fb and insert those in shim
+ instead of ephemeral certs
+ - Make an easy strip+implant tool for our embedded cert lists
- Detection of fallback.efi boot loops
- Some tablet devices seem to always boot the fallback path, ignoring
boot variables, so we need to detect that.