diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2023-05-06 13:34:08 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-06 13:34:08 +0200 |
| commit | 9dfed0d4cc10430a773ac5271cb13c3b19b59c15 (patch) | |
| tree | 9ea84b6c0e4fb34d21e6ef62d235adbd11f67286 /TODO | |
| parent | 5b5e54e058745f47184cb88e0037fa576164000c (diff) | |
| parent | 46886f130d505f483ee1305a51f04196a551e9a2 (diff) | |
| download | systemd-9dfed0d4cc10430a773ac5271cb13c3b19b59c15.tar.gz | |
Merge pull request #27262 from keszybz/ukify-install
Add kernel-install plugin that calls ukify
Diffstat (limited to 'TODO')
| -rw-r--r-- | TODO | 7 |
1 files changed, 1 insertions, 6 deletions
@@ -840,9 +840,7 @@ Features: virtio-fs. * for vendor-built signed initrds: - - kernel-install should be able to install pre-built unified kernel images in - type #2 drop-in dir in the ESP. - - kernel-install should be able install encrypted creds automatically for + - kernel-install should be able to install encrypted creds automatically for machine id, root pw, rootfs uuid, resume partition uuid, and place next to EFI kernel, for sd-stub to pick them up. These creds should be locked to the TPM, and bind to the right PCR the kernel is measured to. @@ -1915,9 +1913,6 @@ Features: - teach it to prepare an ESP wholesale, i.e. with mkfs.vfat invocation - teach it to copy in unified kernel images and maybe type #1 boot loader spec entries from host -* kernel-install: - - optionally, support generating type #2 entries instead of type #1, including signing them - * logind: - logind: optionally, ignore idle-hint logic for autosuspend, block suspend as long as a session is around - logind: wakelock/opportunistic suspend support |