Lennart Poettering

(In case there are concerns that this is a systemd-specific thing: yes, systemd-udev is the main project this is relevant for, but just doing flock() is entirely generic and a...

I responded on https://github.com/karelzak/util-linux/issues/921, let's continue the discussion exclusively there maybe.

It appears "less" cleans things up properly (i.e. restores the terminal formatting) when it gets SIGINT, but not when it gets SIGTERM. when less is invoked by systemd's auto-paging feature...

hmm, so one plan i had for sd-boot is to make it enroll keys automatically on first boot. i.e. if sd-boot detects it runs in an environment where key enrollment...

Note that this is not as easy as it sounds. In Verity mode we want to encode the root hash in the kernel command line included in the unified kernel...

> @poettering You are correct about the cyclic problem, but (unless I'm wrong) the file I'm looking to make sure is signed is not the kernel EFI image. It should...

> I'm not sure if this is something mkosi should do. If I understand correctly, `bootctl` should take care of signing the binaries from /usr when `bootctl add` is executed...

I think the idea would be to iterate through /usr/lib/systemd/boot/efi/*.efi and -- if a secret signing key has been configured -- sign each file there adding in /usr/lib/systemd/boot/efi/*.efi.signed for each....

so what about this: if a distribution is selected that we do not know about right now, we look for a file `mkosi.distribution-` in the local directory, and if it...

@dteleguin i figure adding support for generating mageia images would be good to have. The less intrusive the patch the more welcome it is though ;-) Maybe in the long...