James Le Cuirot

I was under the impression that @nbolton was going to do it. I may be able to, but it's not my top priority. The change was merged to Input Leap.

If you're referring to `EGO_SUM`, which I said was deprecated, then its downsides are not an issue for Flatcar, as we only include packages that Flatcar actually needs. The problem...

I still need to test it, but I wonder if we need to [follow Fedora](https://src.fedoraproject.org/rpms/edk2/c/8f3b82bce4283780273d21b57da242da5f523585?branch=rawhide). They've only changed that in their Secure Boot builds though, and I'm guessing you're not...

Oh wait, tianocore/edk2#10883 already leads to the introduction of `PcdUninstallMemAttrProtocol`, where the workaround is to set that to `TRUE`, not `FALSE`. We're already doing that... but you're not using our...

Hmm, that's not all. Although we have been setting `PcdUninstallMemAttrProtocol = TRUE`, it seems that requires a patch from Fedora that we haven't been applying. Woops.

Reproduced with my local bump of Gentoo's edk2 package to 202505.

Applying Fedora's [patch](https://src.fedoraproject.org/rpms/edk2/blob/rawhide/f/0017-OvmfPkg-X64-add-opt-org.tianocore-UninstallMemAttrPr.patch) together with `PcdUninstallMemAttrProtocol = TRUE` fixes it. I need to see whether it still needs to be `TRUE` with Secure Boot or not. If Fedora took this...

Also reproduced with 202502, which I find surprising because that's been in Gentoo for a while and no one has reported this issue. I suppose that might be because almost...

Ah, good point, Flatcar uses that patch set, and I hadn't considered that factor. That helps explain why no Gentoo users have complained, although I imagine some of them must...

It does still need to be `TRUE` with Secure Boot on, so I'm wondering why Fedora has changed it to `FALSE`, although you can also request it at runtime by...