Bug#846383: grub2: add TPM support

Vincent Bernat bernat at debian.org
Sat Aug 21 21:22:17 BST 2021


fixed 846383 2.04-18
thanks

 ❦ 21 August 2021 20:42 +02, Vincent Bernat:

>> grub2 (2.04-18) unstable; urgency=medium
>>
>>   [ Steve McIntyre ]
>>   * Enable the shim_lock and tpm modules for i386-efi too. Ensure that
>>     tpm is included in our EFI images.
>>   [...]
>>
>>  -- Colin Watson <cjwatson at debian.org>  Sun, 25 Apr 2021 16:20:17 +0100
>>
>> Do we think that's enough to close this bug?
>
> Does this mean it's inside "core.efi"? I think this is not the case:
> there is a "tpm.mod" file and "strings core.efi | grep tpm" does not
> return any result. But maybe it's easy for a user to build a core.efi
> with the module added? Some users may like core.efi to be signed, but
> that's not my case.

OK, that's not the file which is used to boot with EFI. This is
/usr/lib/grub/x86_64-efi/monolithic/grubx64.efi which contains the TPM
module. So, yes, this can be closed.

-- 
Must I hold a candle to my shames?
		-- William Shakespeare, "The Merchant of Venice"



More information about the Pkg-grub-devel mailing list