All GRUB configurations generated for tboot misses "rootflags=subvol=root" and causes boot failure:
if [ -z "${kernelopts}" ]; then
set kernelopts="root=UUID=f4131454-9e14-4af9-b28e-93afc232a8b2 ro
rootflags=subvol=root rd.luks.uuid=luks-3fc85411-b08c-4185-b41d-bc0950877aeb
rhgb quiet "
fi
……
submenu "tboot 1.10.5" {
menuentry 'Fedora GNU/Linux, with tboot 1.10.5 and Linux
6.4.10-100.fc37.x86_64' --class fedora --class gnu-linux --class gnu --class os
--class tboot {
insmod multiboot2
insmod part_gpt
insmod ext2
set root='hd1,gpt2'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint-bios=hd1,gpt2
--hint-efi=hd1,gpt2 --hint-baremetal=ahci1,gpt2
85215e34-eff0-4cba-9f44-f9c485483800
else
search --no-floppy --fs-uuid --set=root
85215e34-eff0-4cba-9f44-f9c485483800
fi
echo 'Loading tboot 1.10.5 ...'
multiboot2 /tboot.gz logging=serial,memory,vga
echo 'Loading Linux 6.4.10-100.fc37.x86_64 ...'
module2 /vmlinuz-6.4.10-100.fc37.x86_64
root=UUID=f4131454-9e14-4af9-b28e-93afc232a8b2 ro
rd.luks.uuid=luks-3fc85411-b08c-4185-b41d-bc0950877aeb rhgb quiet
intel_iommu=on noefi
echo 'Loading initial ramdisk ...'
module2 /initramfs-6.4.10-100.fc37.x86_64.img
echo 'Loading sinit SNB_IVB_SINIT_20190708_PW.bin ...'
module2 /SNB_IVB_SINIT_20190708_PW.bin
}
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ tboot-devel mailing list tboot-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tboot-devel
