Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753908Ab3JVQDE (ORCPT ); Tue, 22 Oct 2013 12:03:04 -0400 Received: from userp1040.oracle.com ([156.151.31.81]:45665 "EHLO userp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753380Ab3JVQDC (ORCPT ); Tue, 22 Oct 2013 12:03:02 -0400 Date: Tue, 22 Oct 2013 18:01:46 +0200 From: Daniel Kiper To: "Woodhouse, David" Cc: Matthew Garrett , Konrad Rzeszutek Wilk , Jan Beulich , Ian Campbell , "ross.philipson@citrix.com" , "stefano.stabellini@eu.citrix.com" , "grub-devel@gnu.org" , "Maliszewski, Richard L" , "xen-devel@lists.xen.org" , "boris.ostrovsky@oracle.com" , Peter Jones , "linux-kernel@vger.kernel.org" , "keir@xen.org" Subject: Re: EFI and multiboot2 devlopment work for Xen Message-ID: <20131022160146.GH3626@debian70-amd64.local.net-space.pl> References: <20131021185758.GD3626@debian70-amd64.local.net-space.pl> <1382433990.1657.66.camel@hastur.hellion.org.uk> <5266620602000078000FCA48@nat28.tlf.novell.com> <1382435127.1657.70.camel@hastur.hellion.org.uk> <526668A502000078000FCA7B@nat28.tlf.novell.com> <20131022134252.GA27302@phenom.dumpdata.com> <20131022144309.GA18547@phenom.dumpdata.com> <1382455537.8512.11.camel@shinybook.infradead.org> <20131022153258.GA12260@srcf.ucam.org> <1382456560.8512.24.camel@shinybook.infradead.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1382456560.8512.24.camel@shinybook.infradead.org> User-Agent: Mutt/1.5.21 (2010-09-15) X-Source-IP: acsinet21.oracle.com [141.146.126.237] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1434 Lines: 33 On Tue, Oct 22, 2013 at 03:42:42PM +0000, Woodhouse, David wrote: > On Tue, 2013-10-22 at 16:32 +0100, Matthew Garrett wrote: > > > > There are two problems with this: > > > > 1) The kernel will only boot if it's signed with a key in db, not a key > > in MOK. > > 2) grub will read the kernel, but the kernel will have to read the > > initramfs using EFI calls. That means your initramfs must be on a FAT > > partition. > > > > If you're happy with those limitations then just use the chainloader > > command. If you're not, use the linuxefi command. > > Well, we're talking about booting the Xen hypervisor aren't we? > > So yes, there are reasons the Linux kernel uses the 'boot stub' the way > it does, but I'm not sure we advocate that Xen should emulate that in > all its 'glory'? Right, I think that sensible mixture of multiboot2 protocol (it is needed to pass at least modules list to Xen; IIRC, linuxefi uses Linux Boot protocol for it) with extension proposed by Vladimir and something similar to linuxefi command will solve our problem (I proposed it in my first email). Users which do not need SB may use upstream GRUB2 and others could use 'multiboot2efi extension'. Daniel -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/