systemd 254-1 makes generate-efi create a corrupt efi

[nberlee]

After upgrading to systemd 254 I was unable to boot anymore.

The following lines are new when doing generate-efi:

objcopy: secure-boot-linux-unsigned.efi:.osrel: section below image base
objcopy: secure-boot-linux-unsigned.efi:.cmdline: section below image base
objcopy: secure-boot-linux-unsigned.efi:.linux: section below image base
objcopy: secure-boot-linux-unsigned.efi:.initrd: section below image base
 objcopy: secure-boot-linux-recovery-unsigned.efi:.osrel: section below image base
objcopy: secure-boot-linux-recovery-unsigned.efi:.linux: section below image base
objcopy: secure-boot-linux-recovery-unsigned.efi:.initrd: section below image base
objcopy: secure-boot-linux-lts-recovery-unsigned.efi:.osrel: section below image base
objcopy: secure-boot-linux-lts-recovery-unsigned.efi:.linux: section below image base
objcopy: secure-boot-linux-lts-recovery-unsigned.efi:.initrd: section below image base

It has probably to do with /usr/lib/systemd/boot/efi/linuxx64.efi.stub but I do not know what currently. I created this issue as more users are probably going to stumble on this. I just downgraded systemd using pacman -U /var/cache/pacman/pkg/systemd-253.7-1-x86_64.pkg.tar.zst and run generate-efi again

[nberlee]

See https://github.com/dracutdevs/dracut/issues/2431

@maximbaz you might be interested in their fix: https://github.com/dracutdevs/dracut/commit/f32e95bcadbc5158843530407adc1e7b700561b1

[maximbaz]

Thanks for sharing, will look into it!

[ShellCode33]

Can confirm, I'm unable to boot as well

[maximbaz]

I'll try to prioritize this, but if anyone wants to send a PR and confirm that it fixes the issue, please don't hesitate to do so, will merge and release fast and if improve afterwards if needed.

[ShellCode33]

I'm on it

[ShellCode33]

Done, let me know what you think. I'm able to boot into linux-hardened now. linux and linux-lts not tested.

[maximbaz]

Thanks a lot, released 1.5.0 :+1: