Bootspec-secureboot cannot generate bootable EFI executables with systemd 254.

DeterminateSystems / bootspec-secureboot

MIT License

89 stars 11 forks source link

Bootspec-secureboot cannot generate bootable EFI executables with systemd 254. #250

Open peigongdsd opened 1 year ago

peigongdsd commented 1 year ago

Bootspec-secureboot cannot work with systemd 254.3 and the newest master branch of nixpkgs. The generated unified kernel images are no longer valid. This may be caused by some updates of systemd-stub, see also systemd/systemd#28419 and dracutdevs/dracut#2431. Seems like the offset of cpio archives when doing objdump should be altered. Relavent code.

peigongdsd commented 1 year ago

A possible fix is to utilize systemd-ukify rather than just copy the archives using objdump. See Ukify in Archwiki.