Valentin David
Valentin David
> And the firstboot part I'd be very wary to add, since we never want to make this any supported, first-class concept... This was discussed in https://github.com/systemd/systemd/pull/36656#discussion_r1987447102
@pedronis In my tests, it seems I need to access the keyring during seeding. It is needed to mark the first boot as successful. So we will need this change...
pc-kernel from 22/edge is not signed with default keys. Please use 22/beta.
~~This updates to secboot https://github.com/snapcore/secboot/commit/8dd835e19590 because later version use a broken go dependency.~~
> I got no problem abandoning this PR once we got a new udisks2 snap available of course. Any ETA from @valentindavid ? The request for 22 branch is in...
Marking as draft as I will split into multiple PRs
It should be all merged.
We might need to start publishing core24 fips.
> What are the constraints when moving snapd to a newer build base? Can we just do it? Just FIPS.
Use was removed in 94b1056fbf0b043b52227c1f19f24306ee1e3bd0 from #11859