Re: [gentoo-user] Re: GPT-UEFI-fstab questions

["Rick \"Zero_Chaos\" Farina" <zerochaos@gentoo.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/14/2013 03:32 PM, James wrote:
> Rick "Zero_Chaos" Farina <zerochaos <at> gentoo.org> writes:
> 
>>> timeout=5
>>> menuentry 'Pentoo' {
>>>     insmod efi_gop
>>>     insmod efi_uga
>>>     insmod part_msdos
>>>     insmod part_gpt
>>>     root=(hd0,2)
>>>     linux /boot/kernel-genkernel-x86_64-3.9.9-pentoo root=/dev/ram0
>>> real_root= video= console=tty1 ro
>>>     initrd /boot/initramfs-genkernel-x86_64-3.9.9-pentoo
>>> }
> 
>> I would like to note that in pentoo-installer grub2 is marked
>> experimental and I honestly don't expect it to work at all.
>  
>> I am beyond happy to accept patches that fix that, I currently lack time
>> and substantial motivation to work on such things.  grub1 works.
> 
>> Thanks,
>> Zero
> 
> Ahhhhhhhhhhh, you guys do exist; NICE piece of work! Sure, I'll figure it

We do, we have an irc channel on freenode, a bug tracker on googlecode,
and I do a lot of talks at hacker cons.

> out and drop you a line.   It'd be much easier on me if you activated my
> request for a dev account...... 

Since I don't recognize your name, clearly you should be around my bug
tracker or irc more if you want a dev account ;-)
> 
> 
> Just for the record, quite a few folks are having troubles with (U)EFI 
> and it appears that the kernel signature is quite often the culprit,
> from my preliminary research [1]. You got any comments about that?

Yes, disable signature verification.  It's not possible to boot a
self-signed kernel from someone else unless you also add in their
certificate to the UEFI and at that point why even bother to sign the
thing?  Booting a self-signed kernel is cool, but me handing out signed
kernels and saying "add this to your UEFI as a valid cert" is exactly as
secure as not signing it at all.

- -Zero
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=Pnd3
-----END PGP SIGNATURE-----