Re: [arch-general] Secure Boot Support

2012-12-11 Thread Kevin Chadwick
> Some users have suggested we use donation money to get a new computer > for one of the developers - while I would not object to a shiny new > computer, I am unsure if this would justify the use of our donations. If you have a modern system already. You may only actually need a new motherboard or

Re: [arch-general] Secure Boot Support

2012-12-11 Thread Thomas Bächler
Am 10.12.2012 17:21, schrieb kristof: >> Could you refer to any documentation about this? Why would the boot >> loader need to call back into shim? > > I'm going off of my correspondence with Matthew Garrett in the comments > section of a post he wrote concerning the shim. His reply to me when I >

Re: [arch-general] Secure Boot Support

2012-12-10 Thread kristof
On Mon, 10 Dec 2012 08:26:58 -0800, kristof wrote: Oh, and some UEFI implementations don't actually allow users to add keys to the database; only remove them. The workaround to this is to delete all keys in the database, which would cause the computer to boot into "setup-mode", where a use

Re: [arch-general] Secure Boot Support

2012-12-10 Thread kristof
Oh, and some UEFI implementations don't actually allow users to add keys to the database; only remove them. The workaround to this is to delete all keys in the database, which would cause the computer to boot into "setup-mode", where a user could manually start repopulating the key database

Re: [arch-general] Secure Boot Support

2012-12-10 Thread kristof
First, I'd like to apologize for sending a very lengthy reply that wasn't attached to this thread. I didn't realize that just because a thread's five days old doesn't mean you can't reply to it. On Mon, 10 Dec 2012 01:28:23 -0800, Thomas Bächler wrote: Am 10.12.2012 06:54, schrieb krist

Re: [arch-general] Secure Boot Support

2012-12-05 Thread Dennis Herbrich
On Wed, Dec 05, 2012 at 04:23:27PM +0100, Pierre Schmitz wrote: > But Thomas is right: this has to be implemented and tested by those who > own such hardware; which at this time we don't. Seems like a perfect opportunity to spend some hard-earned donation money on a test rig, no? Greetings, Den

Re: [arch-general] Secure Boot Support

2012-12-05 Thread Pierre Schmitz
Am 05.12.2012 10:36, schrieb Thomas Bächler: > We don't understand what to do here at all. That's why we the developer > who will be packaging these things needs access to such a machine > himself. I'd really have fun figuring this out, but I currently don't > want to spend money on a new computer.

Re: [arch-general] Secure Boot Support

2012-12-05 Thread Thomas Bächler
Am 05.12.2012 00:57, schrieb kristof: > I actually just bought a new laptop with secure boot capable UEFI, and > if a generous developer could just release an iso with both the shim and > grub-efi installed, then I (and the other Christoph) would gladly try it > on our own machines. Use archiso to

Re: [arch-general] Secure Boot Support

2012-12-04 Thread kristof
On Tue, 04 Dec 2012 15:41:58 -0800, Christoph Vigano wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04.12.2012 10:27, Thomas Bächler wrote: If any Arch developer were to magically receive a new, secure-boot secured computer, then we could quickly get shim support. Well, I'm no

Re: [arch-general] Secure Boot Support

2012-12-04 Thread Christoph Vigano
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04.12.2012 10:27, Thomas Bächler wrote: > If any Arch developer were to magically receive a new, secure-boot > secured computer, then we could quickly get shim support. > Well, I'm not an Arch developer, but as it happens I got myself a Thinkpa

Re: [arch-general] Secure Boot Support

2012-12-04 Thread Thomas Bächler
Am 04.12.2012 02:51, schrieb kristof: > Now that Matthew Garrett's shim is fully featured and publicly > available, will Arch be implementing support for secure boot in the near > future? There is one showstopper to this: To my knowledge, not a single Arch developer or trusted user has a machine t

Re: [arch-general] Secure Boot Support

2012-12-03 Thread Martín Cigorraga
On Mon, Dec 3, 2012 at 10:51 PM, kristof wrote: Thanks for these insightful read, I will look forward those article.

[arch-general] Secure Boot Support

2012-12-03 Thread kristof
Now that Matthew Garrett's shim is fully featured and publicly available, will Arch be implementing support for secure boot in the near future? For those who haven't seen the news yet: http://mjg59.dreamwidth.org/17542.html and http://mjg59.dreamwidth.org/20303.html give a pretty in-depth d