pxeboot_setup.sh copies wrong grubx64.efi
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
StarlingX |
Fix Released
|
Medium
|
Don Penney |
Bug Description
Description
-----------
Secure boot fails for load setup with pxeboot_setup.sh.
umount /media/iso
mount -o loop bootimage.iso /media/iso
mount -o remount,exec,dev /media/iso
/media/
Resulted in:
error: vmlinuz has invalid signature.
error: you need to load the kernel first.
Press any key to continue...
Severity
--------
Minor
Steps to Reproduce
------------------
PXE boot controller-0 with secure boot enabled from a PXE server by running the pxeboot_setup.sh from the ISO.
Expected Behavior
-----------------
PXE boot completes when using the pxeboot_setup.sh script when secure boot is enabled.
Actual Behavior
---------------
Signature failure.
Reproducibility
---------------
Reproducible.
System Configuration
-------
PXE boot a controller-0, single node.
Branch/Pull Time/Commit
-------
starlingx/master
Workaround
----------
pxeboot_setup.sh is copying grubx64.efi from /media/
CVE References
Changed in starlingx: | |
assignee: | nobody → Don Penney (dpenney) |
tags: | added: stx.metal |
Changed in starlingx: | |
importance: | Undecided → Medium |
tags: | added: stx.6.0 |
Fix proposed to branch: master /review. opendev. org/c/starlingx /metal/ +/797527
Review: https:/