summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPeter Jones <pjones@redhat.com>2018-08-01 11:04:14 -0400
committerPeter Jones <pjones@redhat.com>2021-02-15 17:20:05 -0500
commitd211ab2435dad02311b4f8e204491d42638d4aec (patch)
treec16e27b1fc88fff50401ab46a30925cf504203bf
parent5cd4ec44b81361a20a15f5c6e173ecbd8838d822 (diff)
downloadefi-boot-shim-d211ab2435dad02311b4f8e204491d42638d4aec.tar.gz
efi-boot-shim-d211ab2435dad02311b4f8e204491d42638d4aec.zip
Add fallback boot loop detection to TODO
Signed-off-by: Peter Jones <pjones@redhat.com>
-rw-r--r--TODO13
1 files changed, 13 insertions, 0 deletions
diff --git a/TODO b/TODO
index a2cad71d..bdfab075 100644
--- a/TODO
+++ b/TODO
@@ -27,5 +27,18 @@
the string table :/
- Make build.log an artifact of building.
- KEK for Mok. (koike expressed an interest in working on this.)
+- Detection of fallback.efi boot loops
+ - Some tablet devices seem to always boot the fallback path, ignoring
+ boot variables, so we need to detect that.
+ - fallback creates 2 variables, one volatile, one nonvolatile
+ - if shim sees the nonvolatile variable but not the volatile one, it has
+ been booted correctly after fallback has run, so it should remove the
+ nonvolatile variable.
+ - if fallback sees the nonvolatile variable, it is in a fallback boot
+ loop, and should launch the next stage instead of rebooting.
+ - This means the TPM extend chain on machines with broken BDS always
+ looks like: shim -> fallback -> shim -> grub2 -> kernel, *except* on
+ boots from removable media (i.e. install media without fallback),
+ where it looks like shim -> grub2 -> kernel /once/.
# vim:filetype=mail:tw=74