• Do MacBook support/need EFI secure boot (Was: Porting the standard

    From Roland Clobus@21:1/5 to Jeroen Diederen on Thu Apr 8 19:30:02 2021
    To: bluca@debian.org (Luca Boccassi)
    Copy: debian-live@lists.debian.org
    Copy: debian-cd@lists.debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --osxYp8NsXhS3Bjv3fQX2dwwSRw9Qm0mSi
    Content-Type: text/plain; charset=utf-8
    Content-Language: en-GB
    Content-Transfer-Encoding: quoted-printable

    Hello Jeroen and list,

    Now that I'm able to reproducibly build images with live-build, I'm
    looking at missing features in live-build.

    On 17/11/2020 11:03, Jeroen Diederen wrote:
    On 17/11/2020 10:44 Luca Boccassi wrote:
    On 11/11/202 11:54 Roland Clobus wrote:

    live-build:>>> * /EFI/boot contains a 32-bit EFI image on the amd64 iso.>>> ** AP:
    Is this needed/correct?
    IIRC yes - it's rare, but I think there is hardware out there with>> 32bit EFI and 64bit CPUs. > Correct, early MacBooks are of this type.
    I own one, a MacBook 2,1.
    Do you know whether your MacBook 2.1 supports/needs EFI secure boot?
    Currently the live-build generated image does not contain a signed EFI,
    but it could get one with a reasonable amount of effort.

    With kind regards,
    Roland Clobus


    --osxYp8NsXhS3Bjv3fQX2dwwSRw9Qm0mSi--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEUFVLM5Bdj7GSJEb+YsV8aqYUlb0FAmBvPJ8ACgkQYsV8aqYU lb0+bA//dGkISMPtApi8c5n7XycDB0fvuIWZdhrwqGZDj9Uzj8UNez/T3h3mDjpZ 9aAw+vkZH9pKrIiv0aUzDVNqAlChPGp5UjBJZT1Y/sVxa6zIgF8hw1v0nbCPa1IO G63X7wqCBJsi3gFMhlET4X+omnrPKRztzURmsil7oTE7qV0L7dNm0qxyxM0YlUxI jw7ZfkUVbIDLw1vG2+NfLILSvhCW9+ehOzwO1mNN0V7XnKv5kvk7O6McTCZoFI2g rV+eQQLScQd7zYvcbinEAsHCkYrgPj77j3dnB6rqTTaWxUZyu0YzStStgzolKUIt 8sMOuEjTkJhMeisimdzuS4D2bS2EGcWGOCV+UYg5Ew+oI2A0t40w50eSd+6WLYN+ Qy7m3dRdI6K1xTKHP23y9RX/aNfQbvvrZI8gDQqcPQWh/GVAvaGHqrxC89/mX85P KSiyZTMYifxvLXb6LNq4M9UE0ijjoG8RSZ6rROrCQyjbXhGy0FAe/akzIFKK94Y8 L+VT1rZTBN1mQkEndWUoi22s4raQdeMiwaa22kUjGCTHA5Jm+AbU1V+8FNipxJaQ ORmAJx2Ru5yQ3Hl8/dP0U+zQpkCNa1oyMSoEL0WGU0oU2MBC1c7yHoojn7p+hlzX cVX/rnsV9Zr/B9KsMWBRO9ooaw51l0/qqQ5Znepu9VbQ0R8h/6U=
    =abWm
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Roland Clobus on Thu Apr 8 19:40:02 2021
    On Thu, Apr 08, 2021 at 07:25:51PM +0200, Roland Clobus wrote:
    Hello Jeroen and list,

    Now that I'm able to reproducibly build images with live-build, I'm
    looking at missing features in live-build.

    On 17/11/2020 11:03, Jeroen Diederen wrote:
    On 17/11/2020 10:44 Luca Boccassi wrote:
    On 11/11/202 11:54 Roland Clobus wrote:

    live-build:>>> * /EFI/boot contains a 32-bit EFI image on the amd64 iso.>>> ** AP:
    Is this needed/correct?
    IIRC yes - it's rare, but I think there is hardware out there with>> 32bit EFI and 64bit CPUs. > Correct, early MacBooks are of this type.
    I own one, a MacBook 2,1.
    Do you know whether your MacBook 2.1 supports/needs EFI secure boot? Currently the live-build generated image does not contain a signed EFI,
    but it could get one with a reasonable amount of effort.

    With kind regards,
    Roland Clobus

    https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/ debian-mac-10.9.0-amd64-netinst.iso

    [Debliberately broken mid-line] is the image you need - and it may well
    also support signed EFI. The Debian CD team don't have this hardware so
    have been unable to test this for some time.

    All the very best,

    Andy C.

    [Part of the team generating Debian images with each release].

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)