Friday 24 February 2023

Re: Possibility of accepting a network-based installer of Ubuntu as an official flavor?

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=O7LZ
-----END PGP PUBLIC KEY BLOCK-----
Huh. TIL. That's awesome.

On 2/24/23 14:33, Steve Langasek wrote:
> On Fri, Feb 24, 2023 at 02:20:25PM -0600, Aaron Rainbolt wrote:
>> This makes good sense to me. The concern I'm noticing here is that Secure
>> Boot activates a kernel lockdown mode that prohibits kexec.
> Incorrect. It disables the old kexec syscall which doesn't have an
> interface for doing signature verification of the payload. It does not
> disable the use of kexec as a feature.
>
--
Aaron Rainbolt
Lubuntu Developer
https://github.com/ArrayBolt3
https://launchpad.net/~arraybolt3
@arraybolt3:lubuntu.me on Matrix, arraybolt3 on irc.libera.chat