add extra EFI static validation

[Dimitri John Ledkov]

This is the chiper text

16:12 < stgraber> cjwatson: well, at least we have a pretty comprehensive list of things that can go wrong with SB images ;) I'm almost tempted to write a testing script checking that the partition table is correct, that the fs structure is fine for EFI, that shim and grub exist and are signed, that grub.cfg looks right and that vmlinuz is signed. If all of those match, it's pretty sure it'll at least boot (install is a whole other problem)

I'll try to de-chiper that and write some code to do this.
(some of this may be done already)

[Max Brustkern (nuclearbob)]

We've merged one branch for this. Do we want to keep it open for additional validation, or is the initial request satisfied?

[Dimitri John Ledkov (xnox)]

On 24 April 2013 20:53, Max Brustkern <email address hidden> wrote:
> We've merged one branch for this. Do we want to keep it open for
> additional validation, or is the initial request satisfied?
>

Please keep it open. I should land kpartx -g -a mounting second
partition of the CD to fully validate this.
As without checking that there is no guarantee that "dd" to the usb
stick would boot in Secure Boot mode.

Regards,

Dmitrijs.