Allow auto-enrollment of SecureBoot Keys into UEFI #8196
Assignees
Comments
smira
added a commit
to smira/talos
that referenced
this issue
Feb 7, 2024
Fixes siderolabs#8196 Example (profile excerpt): ```yaml output: kind: iso isoOptions: sdBootEnrollKeys: force outFormat: raw ``` Defaults are still same (`if-safe` unless explicitly overridden). Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
smira
added a commit
to smira/talos
that referenced
this issue
Feb 7, 2024
Fixes siderolabs#8196 Example (profile excerpt): ```yaml output: kind: iso isoOptions: sdBootEnrollKeys: force outFormat: raw ``` Defaults are still same (`if-safe` unless explicitly overridden). Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
smira
added a commit
to smira/talos
that referenced
this issue
Feb 8, 2024
Fixes siderolabs#8196 Example (profile excerpt): ```yaml output: kind: iso isoOptions: sdBootEnrollKeys: force outFormat: raw ``` Defaults are still same (`if-safe` unless explicitly overridden). Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
smira
added a commit
to smira/talos
that referenced
this issue
Feb 8, 2024
Fixes siderolabs#8196 Example (profile excerpt): ```yaml output: kind: iso isoOptions: sdBootEnrollKeys: force outFormat: raw ``` Defaults are still same (`if-safe` unless explicitly overridden). Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
smira
added a commit
to smira/talos
that referenced
this issue
Feb 8, 2024
Fixes siderolabs#8196 Example (profile excerpt): ```yaml output: kind: iso isoOptions: sdBootEnrollKeys: force outFormat: raw ``` Defaults are still same (`if-safe` unless explicitly overridden). Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
smira
added a commit
to smira/talos
that referenced
this issue
Feb 21, 2024
Fixes siderolabs#8196 Example (profile excerpt): ```yaml output: kind: iso isoOptions: sdBootEnrollKeys: force outFormat: raw ``` Defaults are still same (`if-safe` unless explicitly overridden). Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com> (cherry picked from commit 087b50f)
# for free
to subscribe to this conversation on GitHub.
Already have an account?
#.
Feature Request
Currrently, the systemd-boot configuration is setup to only automatically enroll secure boot keys if it is booted in a VM:
https://github.com/siderolabs/talos/blob/main/pkg/imager/iso/loader.conf
In our environment we would like to set that option to
forceto always auto-enroll keys as long as the UEFI firmware is in setup mode, even when running bare-metal.The text was updated successfully, but these errors were encountered: