> I'd kind of like us to ship "default" initramfs in like
> linux-initrd-$uname-r
> and linux-initrd-generic and so on. Maybe even signed somehow so that
> the kernel can verify its integrity when booting. Such that booting with
> authenticated FDE is fully authenticated.
>
> But oh well, those are all long term wishes :)
That is in fact how Ubuntu Core handles this; initrd is fixed, and
signed. Since we want the same machinery for FDE in Classic that we have
in Core, its likely this is a reasonable wish :)
Mark
--
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
