[Bug 1465396] Re: Please provide a signed syslinux-efi for secure-boot enabled systems

[Jason Gerard DeRose]

Mathieu: my goof... I thought the "Booting in insecure mode" message was
actually coming from the firmware, didn't realize it was coming from
shim. We confirmed that the shim package in proposed indeed fixes this
behaviour.

And this also unblocks us when it comes to having a signed syslinux.
We're not necessarily super attached to shipping with secure boot
enabled (although we would like the option). What we are attached to is
shipping UEFI systems and not having the "Booting in insecure mode"
message cause customers needless concern and confusion.

Thanks for clearing this up for me, even though it took a bit for it to
sink in! :D

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to syslinux in Ubuntu.
https://bugs.launchpad.net/bugs/1465396

Title:
  Please provide a signed syslinux-efi for secure-boot enabled systems

Status in System76:
  New
Status in syslinux package in Ubuntu:
  Triaged

Bug description:
  syslinux-efi is a great option for PXE booting a UEFI-mode client, but
  the current package is not signed and so cannot be used when secure-
  boot is enable.

  It would be very helpful if there was, say, a `syslinux-signed-efi`
  package similar to `linux-signed-generic`, etc.

  For what it's worth, System76 is working on switching all its products
  to UEFI, and this is one of the last blockers for our imaging system
  (we don't want customers to be confused/concerned about the "booting
  in insecure mode" message).

To manage notifications about this bug go to:
https://bugs.launchpad.net/system76/+bug/1465396/+subscriptions