Comments (4)
There is no bootloader involved in the direct booting method. The firmware runs the systemd EFI stub, which starts the kernel with the set command line and initramfs.
So, anything you can do from the kernel and initramfs is supported.
Note that the EFI system partition, where the signed images are stored, must still be FAT32.
from sbupdate.
Do you have any suggestion on how to be able to specify which btrfs subvolume to load as root? Is there some kind of an initramfs module for this?
I am thinking of having periodic "backups" in the form of subvolumes, and in case an update goes wrong, I could simply switch the previous version.
Some kind of reading material would be welcome, but I cannot find much on the subject.
from sbupdate.
Sorry, I don't use btrfs. Presumably you need to set something special in the root=
argument on the kernel command line.
Have you checked Arch Wiki?
from sbupdate.
I explored this specific use-case of setting up a direct Secure Boot into Arch Linux together with the option of recovery boot into a btrfs subvolume. The trick I chose is to have a second signed image that does not have a hardcoded cmdline
, so Secure Boot allows you to override the root=
argument and choose a different subvolume to boot into - I even made a tiny script where you can interactively select the subvolume directly in UEFI shell
You can have a look at the code here: https://github.com/maximbaz/arch-secure-boot
Hope you'll find it useful.
Disclaimer: what I have is a highly opinionated and specific use-case that I don't plan to extend beyond what is already possible, to whoever actually wants a feature-rich customizable setup I always recommend this repo
from sbupdate.
Related Issues (20)
- Is it possible to enable secureboot without erasing the existing OS? HOT 4
- EXTRA_SIGN in combination w/ e.g. sd-boot can lead to an attacker being able to sign a malicious file HOT 4
- Testing HOT 2
- Wrong kernel output after system update HOT 18
- Missing AUR keys HOT 4
- Output filename for kernel? HOT 3
- signed unified kernel image file name HOT 1
- Multiple cmdlines per kernel HOT 1
- Updating DKMS modules in initramfs doesn't trigger update HOT 4
- use mkinitcpio to build uefi executables HOT 9
- SBAT support for new shim HOT 4
- sbudpate fails when using grub sigchecks HOT 1
- [Feature Request] Please add option to add an extra initrd to efi image HOT 2
- [Feature Request] Please add an option to sign already created image HOT 1
- Use calculated, flexible section-vma offsets instead of hardcoded ones HOT 17
- RFE: add `CMDLINE_ALWAYS` or alike for kernel options that are always added HOT 2
- issue with systemd 252.1 HOT 3
- Allow custom `output_name`
- Allow `.cmdline` to be omitted
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sbupdate.