[gentoo-user] no stinkin bootloaders!

[gentoo-user] no stinkin bootloaders!

[James]

Here is a very interesting read, posted by GKH:

http://kroah.com/log/blog/2013/09/02/booting-a-self-signed-linux-kernel/


Anyone tried this yet?

curiously,
James

Re: [gentoo-user] no stinkin bootloaders!

[Davide Carnovale]

[-- Attachment #1: Type: text/plain, Size: 894 bytes --]

Hi James,
I banged my head a little against this problem as my new laptop has no
option to turn the secure uefi off.
I had no success with gentoo, but I was able to install fedora 18. Although
when recompiling the kernel to use my security key, I never managed to boot
it. I suspect the problem is with signing of the kernel... The guide you
posted seems a lot more accurate than the one I used to follow and has
pointer to other in depth articles. I think you might have a not too hard
time in building your bootable kernel if you follow it. I'll give it a spin
myself when I'll have some free time.
Good luck and thanks for sharing!

D
Il 09/nov/2013 04:22 "James" <wireless@tampabay.rr.com> ha scritto:

> Here is a very interesting read, posted by GKH:
>
> http://kroah.com/log/blog/2013/09/02/booting-a-self-signed-linux-kernel/
>
>
> Anyone tried this yet?
>
> curiously,
> James
>
>
>
>

[-- Attachment #2: Type: text/html, Size: 1335 bytes --]

[gentoo-user] Re: no stinkin bootloaders!

[James]

Davide Carnovale <francesco.davide.carnovale <at> gmail.com> writes:



> Hi James, 
> I banged my head a little against this problem as my new laptop has no
option to turn the secure uefi off. 
> I had no success with gentoo, but I was able to install fedora 18.
Although when recompiling the kernel to use my security key, I never managed
to boot it. I suspect the problem is with signing of the kernel... The guide
you posted seems a lot more accurate than the one I used to follow and has
pointer to other in depth articles. I think you might have a not too hard
time in building your bootable kernel if you follow it. I'll give it a spin
myself when I'll have some free time. 
> 
> Good luck and thanks for sharing! 
> D

Hello David,

You might be interested to install Pentoo on that UEFI lappy:

http://code.google.com/p/pentoo/wiki/UEFI

 Pentoo, is a hardened gentoo targeted with all sorts of tools
to keep your network secure, and have fun with those interlopers.....
Pentoo is very cool and has an old_fashion easy to install iso:

pentoo-amd64-2013.0_RC1.9.iso

Pentoo installation has worked best for me when I use another tool
to setup the drive(s). pentoo-installer is basic and mostly works
(I.E. pre  --> EFI/GPT/UUID). At the end, you get a gentoo system with the
hardened tool chain, a hardened kernel and possible luks:


http://hardenedgentoo.blogspot.com/2010/02/installing-pentoo-on-hard-drive-with.html


All in all, I'm just learning bout these newest offerings. Later,
I hope to successfully put pentoo on top of ZFS as my ultimate goal.
Lots of work and lots of experimenting!

Good Hunting, and post back what you learn.
hth,
James