5.4.249: Sign bzImage

zvivered · 07-30-2023, 12:15 PM

Hello,

Using "make ARCH=x86_64 defconfig" + make, I created bzImage.
This image boots my PC when secure boot is disabled.
Grub 2.06 is used to boot bzImage

In order to boot when secure boot is enabled, can I use a signed bzImage ?
Or should I use another format ?

I tried to sign bzImage with sbsign and got:
error: bad shim signature
Of course - I enrolled the key created in the sign process.
I used the procedure described in:
https://ubuntu.com/blog/how-to-sign-...or-secure-boot

Thank you,
Zvika

TB0ne · 07-30-2023, 04:51 PM

Quote:

Originally Posted by zvivered

Hello,
Using "make ARCH=x86_64 defconfig" + make, I created bzImage. This image boots my PC when secure boot is disabled. Grub 2.06 is used to boot bzImage In order to boot when secure boot is enabled, can I use a signed bzImage ? Or should I use another format ?

I tried to sign bzImage with sbsign and got:

Code:

error: bad shim signature

Of course - I enrolled the key created in the sign process. I used the procedure described in:
https://ubuntu.com/blog/how-to-sign-...or-secure-boot

Again, you claim to be a kernel developer with 15 years experience; yet don't know such things??? Did you try putting something like, "how to create a signed bzimage" into Google ?? Or try to look up your error message??

http://www.kroah.com/log/blog/2013/0...-linux-kernel/
https://unix.stackexchange.com/quest...shim-signature

You *AGAIN* do not give any details, despite being asked many, MANY times. You don't say what you've done/tried so far to solve your problem either. Tried booting with secure boot off the first time?? And did you not ask this SAME QUESTION FOUR YEARS AGO????
https://askubuntu.com/questions/1187...non-efi-kernel

zvivered · 08-01-2023, 12:41 PM

Hi TBOne,

Thank you very much !

Best Regards,
Zvika

TB0ne · 08-01-2023, 05:56 PM

Quote:

Originally Posted by zvivered

Hi TBOne,

Thank you very much !

Again, you come back but don't bother posting your solution, or saying what worked for you. Was it something you got told four years ago, when you posted this same question?? Or was it something for another forum???