Comment 10 for bug 1865515

Revision history for this message
Steve Langasek (vorlon) wrote : Re: [Bug 1865515] Re: Chainbooting from grub over the network to local shim breaks chain of trust

On Tue, May 19, 2020 at 04:15:47PM -0000, Lee Trager wrote:
> I suspect but haven't verified that this may be due to the shim
> not being signed with a key GRUB has.

GRUB embeds no keys, it calls out to shim for verification of signatures.

It would be helpful if someone could verify whether the boot chain is
stopping at the second shim, or at the second grub.