Itxaka

ugh, no it records everything what a pita: https://www.gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html

> > [gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html](https://www.gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html) > > This page talks about module _loading_ - how's that possible with secure boot ? modules are also signed :+1: that is the reason we cannot...

> So we don't need a changed `grub2` binary but signed `squash4` and `loopback` modules would be sufficient ?! sorry, I made a mix of stuff in there. the modules...

NOTICE: if we want to support compressed squash recovery, we need to add modules. for xz is xzio.mod, and Im guessing for gzip it would be gzip.mod. We should be...

gzio seems to be bundled so it should be possible to support squshfs compressed with gz under secure boot. but IMHO we should discourage users from building compressed recoveries. Or...

> Thank you for your reply. Thanks for clarifying for rke2/k3s. Good point in here, I will add a small excerpt below to mention how to change between rke2/k3s versions...

A section was added to point out the different rk2/k3s versions, how to choose them and where to set them.

This is the PR that aded the sbom to kubewarden. Seems simple enough: https://github.com/kubewarden/kubewarden-controller/pull/246

https://github.com/rancher/elemental-operator/pull/160 for github provided images on elemental-operator

Dont really understand why it could not find the command. Will try in a separate repo to see what is going on.