booster icon indicating copy to clipboard operation
booster copied to clipboard

Support UEFI Executable generation with systemd stubs

Open Foxboron opened this issue 3 years ago • 5 comments

This is probably a nice weekend hack for someone, but generating UEFI executables is a must have feature for initramfs generators these days. My WIP patch for mkinitcpio serves as a very nice outline.

Someone that want to try contribute to this project can probably take a stab at it :) Else I can implement it once I have less on my todo list. I'll help review it if needed!

https://github.com/archlinux/mkinitcpio/pull/53

Foxboron avatar Apr 12 '21 22:04 Foxboron

Yes the idea is interesting.

Looking at your patch - how do you sign the result efi boot image?

anatol avatar Apr 12 '21 22:04 anatol

dracut allows you to specify a signing key and it uses sbsign. For mkinitcpio I'd rather implement some "post image generation" hook that would let you use sbctl, but personally this is run with a separate pacman hook for sbctl currently.

Foxboron avatar Apr 12 '21 22:04 Foxboron

If you do want to use golang for this, you could consider using go-uefi.

https://github.com/Foxboron/go-uefi/blob/master/cmd/gosign/main.go

But the API isn't really stable and needs a lot more work.

Foxboron avatar Apr 12 '21 22:04 Foxboron

Yeah, a golang lib is preferable. API stability is not much of concern (thanks to golang modules).

anatol avatar Apr 12 '21 22:04 anatol

Same topic as https://github.com/anatol/booster/issues/110. It doesn't necessarily need to be in Booster.

c3Ls1US avatar Sep 21 '23 17:09 c3Ls1US