Support creating secure-boot enabled images

[rgrunbla]

Hello,

Right now, the generated images are not bootable « by default » on UEFI computers with microsoft keys, as the generated iso is not signed. Indeed, he grub-mkstandalone creates an efi boot file that is not signed (as we don't have access to the keys to do so). Is there a way to rely on grub-shim or other signed alternative to boot the iso without to have to deal with secure boot keys, in this project ?

Thanks !

[mvallim]

Hello,

Right now, the generated images are not bootable « by default » on UEFI computers with microsoft keys, as the generated iso is not signed. Indeed, he grub-mkstandalone creates an efi boot file that is not signed (as we don't have access to the keys to do so). Is there a way to rely on grub-shim or other signed alternative to boot the iso without to have to deal with secure boot keys, in this project ?

Thanks !

@rgrunbla,

In the new version:

All steps describe in README or use scripts.

[oldtime54]

I have found that the only way I can boot into live iso is to disable secure boot and do install. Then i go create MOK key using the mok-util and re-enable secure boot. Am I missing something?