Hi, >> I would like to add that we were using gnu-efi 3.0.17, and by >> downgrading it to 3.0.15, it now works. >> >> That probably means that gnu-efi is the culprit here. >> > > Christian is looking into that topic, you may have seen some patches of > him on the list. He told me that there is currently no sane release of > gnu-efi if you go beyond current distro versions.
Indeed, gnu-efi version 3.0.15 is the latest version release-tagged EFI Boot Guard currently works with, nothing beyond. You need at least the patch [1] since with gnu-efi 3.0.16 commit 4f8b339 "Make ELF constructors and destructors work", EFI Boot Guard's .init_array method no longer works as the watchdog probing functions are not suitable for being called as constructors. That's most likely the reason for your crash. Probably, you need [2] as well if you leave the default -Werror enabled and use gnu-efi > 3.0.17. On x86 at least, then, it should work since it uses --target=efi-app-$(ARCH). On ARM64, it depends on the binutils version (>= 2.38 or not), see my patch "Fix arm support for gnu-efi > 3.0.15", posted to the mailing list but not yet merged. That said, I have not yet tested whether you strictly need some commits 3.0.17..HEAD under the various scenarios, e.g., signed, but there are some sensible fixes to linker scripts and crt0 in that range... Kind regards, Christian [1] https://github.com/siemens/efibootguard/commit/ee11bc14c7289f4875a9db4e5b078f162e0fe042 [2] https://github.com/siemens/efibootguard/commit/115fa35721592a6e91cc2d771c860ed3fb6ec64b [3] https://github.com/siemens/efibootguard/blob/master/Makefile.am#L246 -- Dr. Christian Storm Siemens AG, Technology, T CED OES-DE Otto-Hahn-Ring 6, 81739 Munich, Germany -- You received this message because you are subscribed to the Google Groups "EFI Boot Guard" group. To unsubscribe from this group and stop receiving emails from it, send an email to efibootguard-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/efibootguard-dev/74000D5B-7F25-46EF-8F94-31A19EE47D0D%40siemens.com.
