starlingx
/
metal
Code Issues Proposed changes

Update pxeboot_setup.sh to use stock grubx64.efi 

Secure boot fails for load setup with pxeboot_setup.sh, as the kernel
signature check fails validation due to the recent grub2 update for
CVE-2020-15705. This commit updates pxeboot_setup.sh to use the older
stock grubx64.efi, which will postpone the kernel validation until the
load is installed.

Change-Id: Ic6bfd236b076fc9023a77b1c2d8b9d4f8feee8b8
Closes-Bug: 1933263
Signed-off-by: Don Penney <don.penney@windriver.com>
This commit is contained in:
Don Penney 2021-06-22 14:00:51 -04:00
parent 469cc3ba06
commit f7c7382343
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
bsp-files/pxeboot_setup.sh
View File

@ -97,6 +97,9 @@ mv ${COPY_DIR}/pxeboot_grub.cfg ${COPY_DIR}/grub.cfg
#TFTP Server or dnsmasq
ln -sf ../grub.cfg ${COPY_DIR}/EFI/grub.cfg
# Copy grubx64.efi from the EFI/BOOT dir to the EFI dir
cp -f ${ISODIR}/EFI/BOOT/grubx64.efi ${COPY_DIR}/EFI/
#Variable replacement
sed -i "s#xxxHTTP_URLxxx#${BASE_URL}#g;
s#xxxHTTP_URL_PATCHESxxx#${BASE_URL}/patches#g;