Ubuntu on IBM z Systems

  1. Bug #1872941
  2. Comment #32

Comment 32 for bug 1872941

Revision history for this message
bugproxy (bugproxy) wrote : Comment bridged from LTC Bugzilla

------- Comment From <email address hidden> 2020-04-28 02:27 EDT-------
> Booting over the public internet FTP server, terrifies me. Because
> there is no secureboot verification of either kernel or the initrd.
> Meaning it's trivial to man-in-the-middle attack, and inject things
> into the installer. Can HMC support HTTPS load?

It does support FTPS (via SSL) and SFTP (via SSH). Not sure how good the certificate verification is.

Can you maybe open an RFE against the HMC to also provide HTTPS?