Wednesday 8 December 2021

Re: Revisiting default initramfs compression

On 08/12/2021 23:02, Julian Andres Klode wrote:
> I'd kind of like us to ship "default" initramfs in like
> linux-initrd-$uname-r
> and linux-initrd-generic and so on. Maybe even signed somehow so that
> the kernel can verify its integrity when booting. Such that booting with
> authenticated FDE is fully authenticated.
> But oh well, those are all long term wishes :)

That is in fact how Ubuntu Core handles this; initrd is fixed, and
signed. Since we want the same machinery for FDE in Classic that we have
in Core, its likely this is a reasonable wish :)


ubuntu-devel mailing list
Modify settings or unsubscribe at: