Re: [ubuntu-uk] Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2

[Andres Muniz]

Sorry for those that probably recieve this. But thught might be of interest on 
the subject.

- Mensaje original -
> # Free Software Supporter 
> Issue 51, June 2012
> 

***snip***


> ### FSF recommendations for free operating system distributions
> considering Secure Boot (2012-06-30)
> 
> We have been working hard the last several months to stop Restricted
> Boot, a major threat to user freedom, free software ideals, and free
> software adoption. Under the guise of security, a computer afflicted
> with Restricted Boot refuses to boot any operating systems other than
> the ones the computer distributor has approved in advance. Restricted
> Boot takes control of the computer away from the user and puts it in
> the hands of someone else. This is distinct from Secure Boot, where
> the user has full control over the system.
> 
> Recently, two popular GNU/Linux distributions have announced their
> plans to support Secure Boot. In this article, we review their plans,
> and lay out our current strategy for addressing the threats and
> difficulties posed by this new technology for the free software
> movement. We find any approach that requires users to trust Microsoft
> or any proprietary software company unacceptable, and urge
> distributions to pursue other solutions.
> 
>     *
> 
>   *
> 
>   *
> 
> 
>

-- 
ubuntu-uk@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/

Re: [ubuntu-uk] Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2

[Avi Greenbury]

Rob Beard wrote:
> I was under the impression that with UEFI it is quicker booting than
> a normal BIOS anyway, although the only experience I have of UEFI is 
> support in a ThinkPad T520 BIOS (which still takes a good couple of 
> seconds to do it's self checks and things).

Most 'modern' bioses take several orders of magnitude longer than
they rightfully 'should' do (take Coreboot as an example) so there's no
real excuse for UEFI to appear to be anything other than blisteringly
fast, with or without a signature check on boot.

-- 
Avi

-- 
ubuntu-uk@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/

Re: [ubuntu-uk] Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2

[Rob Beard]

On 22/06/12 18:08, Andres Muniz wrote:

- Mensaje original -
 > Just saw this...
 >
 > http://www.phoronix.com/scan.php?page=news_item&px=MTEyNDY

 >



since this was brought up: would this delay boot times?



I'd expect not, at least not in any noticeable way if it was set to boot 
a default OS.


I was under the impression that with UEFI it is quicker booting than a 
normal BIOS anyway, although the only experience I have of UEFI is 
support in a ThinkPad T520 BIOS (which still takes a good couple of 
seconds to do it's self checks and things).


Rob

--
ubuntu-uk@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/

Re: [ubuntu-uk] Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2

[Andres Muniz]

- Mensaje original -
> Just saw this...
> 
> http://www.phoronix.com/scan.php?page=news_item&px=MTEyNDY
> 
> 
> 
> 
since this was brought up: would this delay boot times?

-- 
ubuntu-uk@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/

Re: [ubuntu-uk] Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2

[Chris Fox]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 22/06/2012 17:26, mac wrote:
> Just saw this...
> 
> http://www.phoronix.com/scan.php?page=news_item&px=MTEyNDY
> 
> 
> 

Some less ad-plastered links, direct from the horses' mouths:

http://blog.canonical.com/2012/06/22/an-update-on-ubuntu-and-secure-boot/

https://lists.ubuntu.com/archives/ubuntu-devel/2012-June/035445.html

And to hopefully pre-empt some of the FUD from the last time this came
up...

- - on x86, users WILL have a boot option to add trusted keys (e.g.
Canonical's)
- - on x86, users WILL have a boot option to disable safeboot entirely
if they wish
- - on ARM, a locked-down (i.e. Win8 only) implementation will only be
required for products shipping with Win8 pre-loaded - so not Android
tablets, etc.

Personally my only concern is that "[Canonical] will be requiring that
the standard Microsoft key be present in the Ubuntu certification
process". I'd rather be able to replace the pre-loaded MS key with
Ubuntu's own, and install/run an entirely MS-free system if I wished.
But I can understand the desire for it to "just work".

Chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/koQQACgkQ/UgLKfoJxI46xwCfVyBxWVG7YsyE/IO9pMFu/9ss
GEcAoNTqyQIt8RDdNwVVnCuTOwZ22xDa
=5mxS
-END PGP SIGNATURE-

-- 
ubuntu-uk@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/

[ubuntu-uk] Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2

[mac]

Just saw this...

http://www.phoronix.com/scan.php?page=news_item&px=MTEyNDY



-- 
ubuntu-uk@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/