** Changed in: linux-meta (Ubuntu)
Assignee: (unassigned) => Kleber Sacilotto de Souza (kleber-souza)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-meta in Ubuntu.
https://bugs.launchpad.net/bugs/2058381
Title:
Compression of ARM64 kernels causes problems with secureboot and
systemd-boot
Status in linux-meta package in Ubuntu:
New
Bug description:
Hello,
I'm trying to deploy an Ubuntu Server on arm64 with securbeoot and UKIs.
I'm running into the problem that the shipped kernel is just a plain gzip
compressed version of the kernel image.
This causes two issues:
- sbsign refuses to sign the kernel without uncompressing it first (Invalid
DOS header magic)
- systemd-stub/systemd-boot don't recognize this kernel as a valid binary
(Bad kernel image: Load error\n Failed to execute Ubuntu Noble Numbat
(development branch) (\EFI\Linux\ubuntu-6.8.0-11-generic.efi): Load error)
Debian just ships an uncompressed kernel and Fedora ships a PE binary (which
they can do because they dropped BIOS support, so this cannot be adopted for
Ubuntu).
Shipping an uncompressed kernel would be the easiest switch from my view,
only causing problems on small /boot partitions or ESP partitions, respectively.
The current version in Ubuntu causes unexpected behaviour with various
bootchain tools.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-meta/+bug/2058381/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
