From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 0F5FDCAC59C for ; Mon, 15 Sep 2025 11:07:35 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uy71M-0005xo-Nl; Mon, 15 Sep 2025 07:05:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uy71E-0005kY-Pa for grub-devel@gnu.org; Mon, 15 Sep 2025 07:05:12 -0400 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uy70z-0004sb-4k for grub-devel@gnu.org; Mon, 15 Sep 2025 07:05:12 -0400 Received: from pps.filterd (m0360072.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 58F9PJ6l020857; Mon, 15 Sep 2025 11:04:50 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=pp1; bh=yQcWGq9+PxDYCHQCY o5fgru4Ft2esYpcwCrCJzq4418=; b=A++hg51dLRy+IBua7+cterBCIH7LnedEa LKoO9FbM9jU2ajneVqGIxFOMPCSGzipQ8Hn69Ue35J1Vfe7CHfHZ0CYG4Z0GsuZ2 osKWrFsflVvOKFdHrDlQxcaAerW3JyN6tVjtZrLpdQLY2IHlmJNudC+oV8Dl96rX jBIwKHkEGH1LBq2oCV5RaAPurNvkdnzMlM+ZqCEqLDDw8W9sW19Hrg69IwD04UAm JVDrd4N6OPLUlvM0l7JkwHQ+qDELj1rLHkuWTlLz1bAIjiphyI3IuS9BDuOVLaDo TAFuiZzbsdib89HFeVFMOyGWlcHm5ZSNKBcNBhDaHUZpCDkF8H1Ow== Received: from ppma13.dal12v.mail.ibm.com (dd.9e.1632.ip4.static.sl-reverse.com [50.22.158.221]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 496g530ft8-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Sep 2025 11:04:50 +0000 (GMT) Received: from pps.filterd (ppma13.dal12v.mail.ibm.com [127.0.0.1]) by ppma13.dal12v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 58F8HsNl018637; Mon, 15 Sep 2025 11:04:49 GMT Received: from smtprelay02.fra02v.mail.ibm.com ([9.218.2.226]) by ppma13.dal12v.mail.ibm.com (PPS) with ESMTPS id 495n5m5u6f-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Sep 2025 11:04:49 +0000 Received: from smtpav02.fra02v.mail.ibm.com (smtpav02.fra02v.mail.ibm.com [10.20.54.101]) by smtprelay02.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 58FB4kai42795346 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 15 Sep 2025 11:04:46 GMT Received: from smtpav02.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 0873720043; Mon, 15 Sep 2025 11:04:46 +0000 (GMT) Received: from smtpav02.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id BDB3A20040; Mon, 15 Sep 2025 11:04:42 +0000 (GMT) Received: from localhost.localdomain (unknown [9.79.204.18]) by smtpav02.fra02v.mail.ibm.com (Postfix) with ESMTP; Mon, 15 Sep 2025 11:04:42 +0000 (GMT) To: grub-devel@gnu.org Subject: [PATCH v11 21/22] docs/grub: Document signing GRUB with an appended signature Date: Mon, 15 Sep 2025 16:31:28 +0530 Message-Id: <20250915110129.20898-22-sudhakar@linux.ibm.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20250915110129.20898-1-sudhakar@linux.ibm.com> References: <20250915110129.20898-1-sudhakar@linux.ibm.com> MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Proofpoint-GUID: 75QrqA5t-EpZblBZRtDeFYwNybMCD9rg X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwOTE1MDA4NiBTYWx0ZWRfX1zWpDL1M3DUl EOYp8Eb76nAr6gYoYUb21npQ1+IFmu90R949WKWKZC09wC/dzznj6+wiMwJhpKhaPRgP3oPeilZ 8sPqw3LbapvFi+An5sG7wRcNNKXqcngQ1NU/NRY0WG23DD7vrsH6gRaWg4LnBJf1JtZe9NgS+1H 5sxdtS1/tiwQ9EbcxUD6YVPD9sS/fVHayYCRYTcs9c6Lv/8kTkHhr5xSX2xcdQkthr1oA/TRmQa hcPbiQrE7YlGIIoefHqtQuWLtAsRlNRZKU2VInhA2QUL0HZMCGXtsxgUA2YUHrmboc3HXGgIY+n cUrThBiSPclShHA8QSmk/im1xzcX6mbpPWDpvlM8wubepgPLckWlAOy/pK6PMhZk7GvPOBoqWn3 /+WZRRMG X-Proofpoint-ORIG-GUID: 75QrqA5t-EpZblBZRtDeFYwNybMCD9rg X-Authority-Analysis: v=2.4 cv=UJ7dHDfy c=1 sm=1 tr=0 ts=68c7f2d2 cx=c_pps a=AfN7/Ok6k8XGzOShvHwTGQ==:117 a=AfN7/Ok6k8XGzOShvHwTGQ==:17 a=yJojWOMRYYMA:10 a=JuTF4qcAAAAA:8 a=VnNF1IyMAAAA:8 a=BlRlUMKLR4rfvJ7WqM8A:9 a=WlT8qwTXB_Kj6um4hl3b:22 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1117,Hydra:6.1.9,FMLib:17.12.80.40 definitions=2025-09-15_04,2025-09-12_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 adultscore=0 bulkscore=0 impostorscore=0 spamscore=0 priorityscore=1501 clxscore=1015 suspectscore=0 phishscore=0 malwarescore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2507300000 definitions=main-2509150086 Received-SPF: pass client-ip=148.163.158.5; envelope-from=sudhakar@linux.ibm.com; helo=mx0b-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Sudhakar Kuppusamy via Grub-devel Reply-To: The development of GNU GRUB Cc: Sudhakar Kuppusamy , dja@axtens.net, jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, msuchanek@suse.com, mlewando@redhat.com, stefanb@linux.ibm.com, avnish@linux.ibm.com, nayna@linux.ibm.com, ssrish@linux.ibm.com, sridharm@linux.ibm.com Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org U2lnbmluZyBHUlVCIGZvciBmaXJtd2FyZSB0aGF0IHZlcmlmaWVzIGFuIGFwcGVuZGVkIHNpZ25h dHVyZSBpcyBhCmJpdCBmaWRkbHkuIEkgZG9uJ3Qgd2FudCBwZW9wbGUgdG8gaGF2ZSB0byBmaWd1 cmUgaXQgb3V0IGZyb20gc2NyYXRjaApzbyBkb2N1bWVudCBpdCBoZXJlLgoKU2lnbmVkLW9mZi1i eTogRGFuaWVsIEF4dGVucyA8ZGphQGF4dGVucy5uZXQ+ClNpZ25lZC1vZmYtYnk6IFN1ZGhha2Fy IEt1cHB1c2FteSA8c3VkaGFrYXJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0ZWZhbiBC ZXJnZXIgPHN0ZWZhbmJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IEF2bmlzaCBDaG91aGFu IDxhdm5pc2hAbGludXguaWJtLmNvbT4KLS0tCiBkb2NzL2dydWIudGV4aSB8IDEwMiArKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgMTAyIGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9kb2NzL2dydWIudGV4aSBiL2RvY3Mv Z3J1Yi50ZXhpCmluZGV4IDM1ODk3NWZjOC4uNzQ3NzdjMDQwIDEwMDY0NAotLS0gYS9kb2NzL2dy dWIudGV4aQorKysgYi9kb2NzL2dydWIudGV4aQpAQCAtOTYxMSw2ICs5NjExLDEwOCBAQCBpbWFn ZSB3b3JrcyB1bmRlciBVRUZJIHNlY3VyZSBib290IGFuZCBjYW4gbWFpbnRhaW4gdGhlIHNlY3Vy ZS1ib290IGNoYWluLiBJdAogd2lsbCBhbHNvIGJlIG5lY2Vzc2FyeSB0byBlbnJvbGwgdGhlIHB1 YmxpYyBrZXkgdXNlZCBpbnRvIGEgcmVsZXZhbnQgZmlybXdhcmUKIGtleSBkYXRhYmFzZS4KIAor QHNlY3Rpb24gU2lnbmluZyBHUlVCIHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlCitUaGUgQGZp bGV7Y29yZS5lbGZ9IGl0c2VsZiBjYW4gYmUgc2lnbmVkIHdpdGggYSBMaW51eCBrZXJuZWwgbW9k dWxlLXN0eWxlCithcHBlbmRlZCBzaWduYXR1cmUgKEBweHJlZntVc2luZyBhcHBlbmRlZCBzaWdu YXR1cmVzfSkuCitUbyBzdXBwb3J0IElFRUUxMjc1IHBsYXRmb3JtcyB3aGVyZSB0aGUgYm9vdCBp bWFnZSBpcyBvZnRlbiBsb2FkZWQgZGlyZWN0bHkKK2Zyb20gYSBkaXNrIHBhcnRpdGlvbiByYXRo ZXIgdGhhbiBmcm9tIGEgZmlsZSBzeXN0ZW0sIHRoZSBAZmlsZXtjb3JlLmVsZn0KK2NhbiBzcGVj aWZ5IHRoZSBzaXplIGFuZCBsb2NhdGlvbiBvZiB0aGUgYXBwZW5kZWQgc2lnbmF0dXJlIHdpdGgg YW4gRUxGCitOb3RlIGFkZGVkIGJ5IEBjb21tYW5ke2dydWItaW5zdGFsbH0gb3IgQGNvbW1hbmR7 Z3J1Yi1ta2ltYWdlfS4KK0FuIGltYWdlIGNhbiBiZSBzaWduZWQgdGhpcyB3YXkgdXNpbmcgdGhl IEBjb21tYW5ke3NpZ24tZmlsZX0gY29tbWFuZCBmcm9tCit0aGUgTGludXgga2VybmVsOgorCitA aXRlbWl6ZQorQGl0ZW0gU2lnbmluZyBhIEdSVUIgaW1hZ2UgdXNpbmcgYSBzaW5nbGUgc2lnbmVy IGtleS4gVGhlIGdydWIua2V5IGlzIHlvdXIKK3ByaXZhdGUga2V5IHVzZWQgZm9yIEdSVUIgc2ln bmluZywgZ3J1Yi5kZXIgaXMgYSBjb3JyZXNwb25kaW5nIHB1YmxpYyBrZXkKKyhjZXJ0aWZpY2F0 ZSkgdXNlZCBmb3IgR1JVQiBzaWduYXR1cmUgdmVyaWZpY2F0aW9uLCBhbmQgdGhlIGtlcm5lbC5k ZXIgaXMKK3lvdXIgcHVibGljIGtleSAoY2VydGlmaWNhdGUpIHVzZWQgZm9yIGtlcm5lbCBzaWdu YXR1cmUgdmVyaWZpY2F0aW9uLgorQGV4YW1wbGUKK0Bncm91cAorIyBEZXRlcm1pbmUgdGhlIHNp emUgb2YgdGhlIGFwcGVuZGVkIHNpZ25hdHVyZS4gSXQgZGVwZW5kcyBvbiB0aGUKKyMgc2lnbmlu ZyBrZXkgYW5kIHRoZSBoYXNoIGFsZ29yaXRobS4KKyMKKyMgU2lnbmluZyB0aGUgL2Rldi9udWxs IHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlLgorCitzaWduLWZpbGUgU0hBMjU2IGdydWIua2V5 IGdydWIuZGVyIC9kZXYvbnVsbCAuL2VtcHR5LnNpZworCisjIEdldCB0aGUgc2l6ZSBvZiB0aGUg c2lnbmF0dXJlLgorCitFTVBUWV9TSUdfU0laRT1gc3RhdCAtYyAnJXMnIC4vZW1wdHkuc2lnYAor CisjIFJlbW92ZSB0aGUgZW1wdHkgZmlsZSBzaWduYXR1cmUuCisKK3JtIC4vZW1wdHkuc2lnCisK KyMgQnVpbGQgYSBHUlVCIGltYWdlIHdpdGggJEVNUFRZX1NJR19TSVpFIHJlc2VydmVkIGZvciB0 aGUgc2lnbmF0dXJlLgorCitncnViLW1raW1hZ2UgLU8gcG93ZXJwYy1pZWVlMTI3NSAtbyBjb3Jl LmVsZi51bnNpZ25lZCAteCBrZXJuZWwuZGVyIFwKKyAgLXAgL2dydWIgLS1hcHBlbmRlZC1zaWdu YXR1cmUtc2l6ZSAkRU1QVFlfU0lHX1NJWkUgXAorICAtLW1vZHVsZXM9ImFwcGVuZGVkc2lnIC4u LiIgLi4uCisKKyMgU2lnbmluZyBhIEdSVUIgaW1hZ2Ugd2l0aCBhbiBhcHBlbmRlZCBzaWduYXR1 cmUuCisKK3NpZ24tZmlsZSBTSEEyNTYgZ3J1Yi5rZXkgZ3J1Yi5kZXIgY29yZS5lbGYudW5zaWdu ZWQgY29yZS5lbGYuc2lnbmVkCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhhbXBsZQorQGl0ZW0gU2ln bmluZyBhIEdSVUIgaW1hZ2UgdXNpbmcgbW9yZSB0aGFuIG9uZSBzaWduZXIga2V5LiBUaGUgZ3J1 YjEua2V5IGFuZAorZ3J1YjIua2V5IGFyZSBwcml2YXRlIGtleXMgdXNlZCBmb3IgR1JVQiBzaWdu aW5nLCBncnViMS5kZXIgYW5kIGdydWIyLmRlcgorYXJlIGNvcnJlc3BvbmRpbmcgcHVibGljIGtl eXMgKGNlcnRpZmljYXRlcykgdXNlZCBmb3IgR1JVQiBzaWduYXR1cmUgdmVyaWZpY2F0aW9uLgor VGhlIGtlcm5lbDEuZGVyIGFuZCBrZXJuZWwyLmRlciBhcmUgeW91ciBwdWJsaWMga2V5cyAoY2Vy dGlmaWNhdGVzKSB1c2VkIGZvcgora2VybmVsIHNpZ25hdHVyZSB2ZXJpZmljYXRpb24uCitAZXhh bXBsZQorQGdyb3VwCisjIEdlbmVyYXRlIGEgcmF3IHNpZ25hdHVyZSBmb3IgL2Rldi9udWxsIHNp Z25pbmcgdXNpbmcgT3BlblNTTC4KKworb3BlbnNzbCBjbXMgLXNpZ24gLWJpbmFyeSAtbm9jZXJ0 cyAtaW4gL2Rldi9udWxsIC1zaWduZXIgXAorICBncnViMS5kZXIgLWlua2V5IGdydWIxLmtleSAt c2lnbmVyIGdydWIyLmRlciAtaW5rZXkgZ3J1YjIua2V5IFwKKyAgLW91dCAuL2VtcHR5LnA3cyAt b3V0Zm9ybSBERVIgLW5vYXR0ciAtbWQgc2hhMjU2CisKKyMgU2lnbmluZyB0aGUgL2Rldi9udWxs IHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlLgorCitzaWduLWZpbGUgLXMgLi9lbXB0eS5wN3Mg c2hhMjU2IC9kZXYvbnVsbCAvZGV2L251bGwgLi9lbXB0eS5zaWduZWQKKworIyBHZXQgdGhlIHNp emUgb2YgdGhlIHNpZ25hdHVyZS4KKworRU1QVFlfU0lHX1NJWkU9YHN0YXQgLWMgJyVzJyAuL2Vt cHR5LnNpZ25lZGAKKworIyBSZW1vdmUgdGhlIGVtcHR5IGZpbGUgc2lnbmF0dXJlcy4KKworcm0g Li9lbXB0eS5zaWduZWQgLi9lbXB0eS5wN3MKKworIyBCdWlsZCBhIEdSVUIgaW1hZ2Ugd2l0aCAk RU1QVFlfU0lHX1NJWkUgcmVzZXJ2ZWQgZm9yIHRoZSBzaWduYXR1cmUuCisKK2dydWItbWtpbWFn ZSAtTyBwb3dlcnBjLWllZWUxMjc1IC1vIGNvcmUuZWxmLnVuc2lnbmVkIC14IGtlcm5lbDEuZGVy IFwKKyAga2VybmVsMi5kZXIgLXAgL2dydWIgLS1hcHBlbmRlZC1zaWduYXR1cmUtc2l6ZSAkRU1Q VFlfU0lHX1NJWkUgXAorICAtLW1vZHVsZXM9ImFwcGVuZGVkc2lnIC4uLiIgLi4uCisKKyMgR2Vu ZXJhdGUgYSByYXcgc2lnbmF0dXJlIGZvciBHUlVCIGltYWdlIHNpZ25pbmcgdXNpbmcgT3BlblNT TC4KKworb3BlbnNzbCBjbXMgLXNpZ24gLWJpbmFyeSAtbm9jZXJ0cyAtaW4gY29yZS5lbGYudW5z aWduZWQgLXNpZ25lciBcCisgIGdydWIxLmRlciAtaW5rZXkgZ3J1YjEua2V5IC1zaWduZXIgZ3J1 YjIuZGVyIC1pbmtleSBncnViMi5rZXkgXAorICAtb3V0IGNvcmUucDdzIC1vdXRmb3JtIERFUiAt bm9hdHRyIC1tZCBzaGEyNTYKKworIyBTaWduaW5nIGEgR1JVQiBpbWFnZSB3aXRoIGFuIGFwcGVu ZGVkIHNpZ25hdHVyZS4KKworc2lnbi1maWxlIC1zIGNvcmUucDdzIHNoYTI1NiAvZGV2L251bGwg Y29yZS5lbGYudW5zaWduZWQgY29yZS5lbGYuc2lnbmVkCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhh bXBsZQorQGl0ZW0gRG9uJ3QgZm9yZ2V0IHRvIGluc3RhbGwgdGhlIHNpZ25lZCBpbWFnZSBhcyBy ZXF1aXJlZAorKGUuZy4gb24gcG93ZXJwYy1pZWVlMTI3NSwgdG8gdGhlIFBSZVAgcGFydGl0aW9u KS4KK0BleGFtcGxlCitAZ3JvdXAKKyMgSW5zdGFsbCBzaWduZWQgR1JVQiBpbWFnZSB0byB0aGUg UFJlUCBwYXJ0aXRpb24gb24gcG93ZXJwYy1pZWVlMTI3NQorCitkZCBpZj1jb3JlLmVsZi5zaWdu ZWQgb2Y9L2Rldi9zZGExCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhhbXBsZQorQGVuZCBpdGVtaXpl CisKK0FzIHdpdGggVUVGSSBzZWN1cmUgYm9vdCwgaXQgaXMgbmVjZXNzYXJ5IHRvIGJ1aWxkLWlu IHRoZSByZXF1aXJlZCBtb2R1bGVzLAorb3Igc2lnbiB0aGVtIGlmIHRoZXkgYXJlIG5vdCBwYXJ0 IG9mIHRoZSBHUlVCIGltYWdlLgorCiBAbm9kZSBQbGF0Zm9ybSBsaW1pdGF0aW9ucwogQGNoYXB0 ZXIgUGxhdGZvcm0gbGltaXRhdGlvbnMKIAotLSAKMi4zOS41IChBcHBsZSBHaXQtMTU0KQoKCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkdydWItZGV2ZWwg bWFpbGluZyBsaXN0CkdydWItZGV2ZWxAZ251Lm9yZwpodHRwczovL2xpc3RzLmdudS5vcmcvbWFp bG1hbi9saXN0aW5mby9ncnViLWRldmVsCg==