Booting a self-signed Linux kernel
Booting a self-signed Linux kernel
Greg Kroah-Hartman has put together a
step-by-step tutorial on how to build and boot a self-signed kernel on
a UEFI secure boot system. "The first two options here enable EFI
mode, and tell the kernel to build itself as a EFI binary that can be run
directly from the UEFI bios. This means that no bootloader is involved at
all in the system, the UEFI bios just boots the kernel, no “intermediate”
step needed at all. As much as I love gummiboot, if you trust the kernel
image you are running is 'correct', this is the simplest way to boot a
signed kernel.
"
