[Bug 2060168] Re: Prebuilt signed grub images should include f2fs and exfat modules

[Mate Kukri]

Is there any practical utility for this? I don't think that is a
supported use case, and *someone might use this* isn't a justifiable
reason to significantly increase our Secure Boot attack surface.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-unsigned in Ubuntu.
https://bugs.launchpad.net/bugs/2060168

Title:
  Prebuilt signed grub images should include f2fs and exfat modules

Status in grub2-unsigned package in Ubuntu:
  New

Bug description:
  I guess this is the correct source package to send a feature request
  for debian/build-efi-images script.

  Here is what I ask for:

  --- build-efi-images
  +++ build-efi-images.new
  @@ -101,7 +101,9 @@
   	echo
   	efifwsetup
   	efinet
  +	exfat
   	ext2
  +	f2fs
   	fat
   	font
   	gettext

  
  Motivation: it is pretty easy to make recent ubuntu iso images loopback-boot from f2fs and exfat partitions, but it would not work with secureboot because the signed grub images from grub-efi-amd64-signed do not contain the modules.

  There are already bug reports for casper to make it boot from f2fs[1]
  and exfat[2]

  [1] https://bugs.launchpad.net/ubuntu/+source/casper/+bug/2058826
  [2] https://bugs.launchpad.net/ubuntu/+source/casper/+bug/2038694

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2060168/+subscriptions