search

opencomputeproject / onie

Open Network Install Environment
https://opencomputeproject.github.io/onie
Other
605 stars 376 forks source link

Boot ONIE Using Secure Boot #688

Open cbrune opened 6 years ago

cbrune commented 6 years ago

This goal has been stated numerous times. Here is a good reference:

http://lists.opencompute.org/pipermail/opencompute-onie/2017-April/001388.html

The main ideas:

  1. ONIE should boot with UEFI Secure Boot enabled.
  2. ONIE should verify that NOS installer images pass certain security checks
kielfriedt commented 3 years ago

I see mention of UEFI on x86, with ARM64 now using UEFI does this plan on being pushed to arm platforms?

ehdoyle commented 3 years ago

Well, secure boot is finally in now in for x86. ARM support is pending getting the arm emulation running, and there's some talk about doing an installer that would get verified by the keys in the switch's BIOS...