puzzleos / stubby

UEFI bootloader stub
GNU Lesser General Public License v2.1
13 stars 8 forks source link

Change default cmdline behavior when secureboot is off #4

Closed hallyn closed 3 years ago

hallyn commented 3 years ago

When secureboot is turned off, stubby uses the efi shell provided cmdline instead of the cmdline file. Change this behavior, as it makes testing an unsigned blob or shim for basic bringup more cumbersome. New (intended) behavior:

  1. If secureboot is set, no change
  2. If sb is off and there is no cmdline in the smoosh, then use the shell's.
  3. If sb is off and there is a cmdline in the smoosh, then check the LoadIgnoreStubCmdline UEFI variable. If it is set to 1, use the shell-provided cmdline. Else continue to use the cmdline in the smoosh file.

Signed-off-by: Serge Hallyn serge@hallyn.com