diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-09-04 21:37:11 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2024-09-14 23:05:23 +0200 |
| commit | fd737172f1068870fe1ededbe9b2ed4a86663acd (patch) | |
| tree | 57ed7c8ab104316b7530f79f67db5e9c885ad8a2 /docker | |
| parent | beb3df0733d8cf682291e19b0df0871da20ab5d4 (diff) | |
| download | vyos-build-fd737172f1068870fe1ededbe9b2ed4a86663acd.tar.gz vyos-build-fd737172f1068870fe1ededbe9b2ed4a86663acd.zip | |
T861: add UEFI Secure Boot support
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.
NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:
data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
Diffstat (limited to 'docker')
0 files changed, 0 insertions, 0 deletions