search

secureblue / secureblue

Hardened Fedora Atomic and Fedora CoreOS images
https://github.com/secureblue/secureblue/wiki
Apache License 2.0
340 stars 33 forks source link

Any modifications to grub might not work because of `bootupd` utilization since F41 #549

Open fiftydinar opened 3 days ago

fiftydinar commented 3 days ago

This includes setting GRUB password, which is the current recommendation in the post-install README: https://github.com/secureblue/secureblue/blob/live/docs/POSTINSTALL-README.md#grub

Currently, bootupd package is installed by default & bootupctl backend generate-update-metadata command is performed, but nothing else is done at the moment.

https://pagure.io/fork/siosm/workstation-ostree-config/blob/main/f/bootupd.yaml

However, it will be used very soon to automatically update bootloader on UEFI & BIOS systems, which might conflict even further with GRUB modifications.

Only diff of this needs to be merged into F41. https://pagure.io/fork/siosm/workstation-ostree-config/blob/f41-wip/f/bootupd.yaml

fiftydinar commented 2 days ago

Update:

Automatic bootloader updates should be enabled now: https://github.com/ublue-os/main/issues/634#issuecomment-2470211788