search

rancher / elemental

Elemental is a software stack enabling centralized, full cloud-native OS management with Kubernetes.
https://elemental.docs.rancher.com/
Apache License 2.0
308 stars 39 forks source link

Investigate squashfs under secureboot #487

Open Itxaka opened 2 years ago

Itxaka commented 2 years ago

Currently we only have loopback support for secureboot (i.e. the module is bundled with the signed grub.efi) but there is no squashfs support.

That would require 2 extra modules to be included in grub. Elemental teal does not use squashfs, only loop devices.

kkaempf commented 2 years ago

We asked for squashfs in grub but retracted this request later :-/ (The fewer modules the better - from a security pov. So security and grub2 maintainer were actually happy about this :wink:)

Itxaka commented 2 years ago

Yes and this is good. We only need to support loop devices in Teal so we went the route of petitioning for that to the grub maintainers.

This is just a follow up card to understand if we need it, or not or we can live with it, etc... Also following the discussion on dropping squashfs from https://github.com/rancher/elemental-toolkit/discussions/1626 which would result in this closing. Mostly a side effect to show that there is things we miss if we support squashfs.