Hello,
On 06/12/2023 at 22:09, Steve McIntyre wrote:
On Wed, Dec 06, 2023 at 06:01:17PM +0100, Bastian Blank wrote:
I would like do stop signing i386 kernels.
- IA32 UEFI is basically non existent outside of the Apple world and
maybe some embedded stuff.
(...)
there's no point in signing i386 grub and fwupd or
having a signed shim if we don't have a signed kernel.
Over the years I have seen a number of netbook or tablet-style PCs with
32-bit UEFI firmware and a 64-bit capable CPU, so they could boot with
grub-efi-ia32 and an amd64 kernel. I do not remember if they supported
secure boot though.