lanzaboote
lanzaboote copied to clipboard
nix-community
Manipulate efivars when installing via `lzbt`
We should manipulate the efivars when we install Lanzaboote to point the standard boot entry to the systemd-boot path. This should be implemented via a command line flag ~that is disabled by default~. ~Otherwise~ Without being able to disable manipulating efivars, testing becomes annoying (i.e. our rust unit tests) and it also makes building disk images much harder.
Otherwise testing becomes annoying and it also makes building disk images much harder.
I didn't understand this part very well.
If lzbt always manipulates efivars, we cannot run our rust test suite anymore. So we need to be able to disable manipulating efivars to have easy and quick tests for the rest of the system.
If lzbt always manipulates efivars, we cannot run our rust test suite anymore. So we need to be able to disable manipulating efivars to have easy and quick tests for the rest of the system.
This makes sense. Note that we have EFIVARS manipulation in our NixOS tests. :)
Should we fork to bootctl update and logic to handle A/B bootloaders and avoidance of broken systemd boot or should we go all the way and replace bootctl here?
Although there is some charm to re-implementing systemd functionality (because we can upstream it) I think we can and should use bootctl for now. I'll implement something. However I don't know how `bootctl can help with an A/B system for bootloaders.
Although there is some charm to re-implementing systemd functionality (because we can upstream it) I think we can and should use bootctl for now. I'll implement something.
Awesome, I will let you do it then.
However I don't know how `bootctl can help with an A/B system for bootloaders.
Not really, but it's okay :)