Ubuntu's "distro packager" is also a single line of code, as follows:






"Trees of bootloader components are profided together with a sample xorriso 
command to use."



Spelling randomly varies by architecture. ;-) The other key to Ubuntu's 
proliferation has been the shim.efi/fbx.efi secure-boot process, /EFI/ubuntu 
can be re-named and so can everything else, but it won't boot, secure or not, 
unless the kernel is rebuilt to use a different name. All Ubuntu's, even Bodhi, 
use not only the same signed bootloader, but the same signature, which 
Canonical paid Microsoft for. Secure or not, you'll need a "non-generic" kernel 
to EFI stub-load from the firmware boot manager.



SmartOS secure-boots from optical only. There is no ESP or PXE involved, secure 
boot or no. The security is between your UEFI and your CDROM. I can boot 
smartos.iso from SDXC, directly in the slot, on a subset of hardware having 
said slot. I have a USB SDXC reader that says it's an optical drive, I can boot 
from that too, also a subset. I can boot from SD with the USB reader, or the 
older iMac, but the newer slots have a firmware requirement of SDXC for secure 
boot. For which the SD/SDXC USB reader, is a workaround. But, only if the UEFI 
allows USB boot.



Internal SDXC secure-boot doesn't require Microsoft Security Theatre. BYOKey.


-Eric
------------------------------------------
illumos: illumos-discuss
Permalink: 
https://illumos.topicbox.com/groups/discuss/T105ca75544ab3123-M67a59931fd7b214409314b55
Delivery options: https://illumos.topicbox.com/groups/discuss/subscription

Reply via email to