From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 75A7EC87FC9 for ; Tue, 29 Jul 2025 14:56:04 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ugli7-0000pj-JN; Tue, 29 Jul 2025 10:53:47 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ugli0-0000Xc-Qr for grub-devel@gnu.org; Tue, 29 Jul 2025 10:53:40 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uglhy-0007GV-Ru for grub-devel@gnu.org; Tue, 29 Jul 2025 10:53:40 -0400 Received: from pps.filterd (m0353729.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 56T4Yumg015094; Tue, 29 Jul 2025 14:53:35 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=pp1; bh=La45QWbFlrFbzn6Bz 1LhFnjBme6n8N2PHVba+mivY98=; b=ER0pQe+CYXx9xGJoqw4dxicdq/qMO7aE4 BTBlQ7QmSDORwuA/Pj7p6kesT8pnuqsAd7iCiOsq9SnUVVFEzobG+VToodfhrw/V t0LGYzcS2AkJD3+mklKThwDgnM3pI3jXDL/iNvR/vt93Y2h7fER+bLY99JmTmLRF RED3DwvDaPdoNYE7U7tw4Ocl55pfxXpXe1GL1ptKPokYrZaauZUUbPSGGNDKklmz Sfso1QzTkzuGsJk4bzzPtIVIkUzuCH+/MaD2TVYvJomsPjHexCY5pswxiTao8tJT XcNjrTitH0FLFafJtgvw/BLOaMIu8su4aXq2Q0YRQqLV85IZkaheg== Received: from ppma13.dal12v.mail.ibm.com (dd.9e.1632.ip4.static.sl-reverse.com [50.22.158.221]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 484qfqq8g9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 29 Jul 2025 14:53:34 +0000 (GMT) Received: from pps.filterd (ppma13.dal12v.mail.ibm.com [127.0.0.1]) by ppma13.dal12v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 56TE6uoY006269; Tue, 29 Jul 2025 14:53:33 GMT Received: from smtprelay04.fra02v.mail.ibm.com ([9.218.2.228]) by ppma13.dal12v.mail.ibm.com (PPS) with ESMTPS id 485bjm2mjd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 29 Jul 2025 14:53:33 +0000 Received: from smtpav07.fra02v.mail.ibm.com (smtpav07.fra02v.mail.ibm.com [10.20.54.106]) by smtprelay04.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 56TErUYj17039650 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 29 Jul 2025 14:53:30 GMT Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 078BA20043; Tue, 29 Jul 2025 14:53:30 +0000 (GMT) Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 9963C20040; Tue, 29 Jul 2025 14:53:27 +0000 (GMT) Received: from localhost.localdomain (unknown [9.39.21.169]) by smtpav07.fra02v.mail.ibm.com (Postfix) with ESMTP; Tue, 29 Jul 2025 14:53:27 +0000 (GMT) From: Sudhakar Kuppusamy To: grub-devel@gnu.org Cc: dja@axtens.net, jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, msuchanek@suse.com, mlewando@redhat.com, stefanb@linux.ibm.com, avnish@linux.ibm.com, nayna@linux.ibm.com, ssrish@linux.ibm.com, Sudhakar Kuppusamy Subject: [PATCH v6 19/20] docs/grub: Document signing GRUB with an appended signature Date: Tue, 29 Jul 2025 20:21:55 +0530 Message-Id: <20250729145156.3522-20-sudhakar@linux.ibm.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20250729145156.3522-1-sudhakar@linux.ibm.com> References: <20250729145156.3522-1-sudhakar@linux.ibm.com> MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNzI5MDExMyBTYWx0ZWRfX7DMhxloC7kfm oK+t7gT/+l5da9Hv2EKsFDhr2pN8twLbvozROrnZOi9Z8AThjxTLhSaXW5Djumn4TONd0C3aIKn EMYKIKa5VuEE4nqrHwZP5TBHI+o8C5PgJ/QSZrtHhzyx0F1Ok725h6/HhdIZCM5FjuH5rHJQn70 UKYsWORODjxyZIpAxMCNBe7OwjF4N6a85adQ2zmSYv8PeuZtWB4DmZaIWJIwhQzqK/RDaEDyYF2 7xLasmZaNmEHzzaaGcfUFaAcCP0CUupedCxRI746AP9716QbBCNKoiL2pvArlKessY4DP3gy+4g dvpq4FUAEoCmoG8Z7WTQJ4+iqzPePNn3iYqy7ZcJ6LMDdyjPQYUvaH74zD7olwLApEJkgos84pp rs6xuWXg0sE+resD6ScEnV1U7npbv/2WX6sRTsw2HMhF3G/NMahMrXLjJoimMfhDthFUqzkb X-Authority-Analysis: v=2.4 cv=Je28rVKV c=1 sm=1 tr=0 ts=6888e06e cx=c_pps a=AfN7/Ok6k8XGzOShvHwTGQ==:117 a=AfN7/Ok6k8XGzOShvHwTGQ==:17 a=Wb1JkmetP80A:10 a=JuTF4qcAAAAA:8 a=VnNF1IyMAAAA:8 a=BlRlUMKLR4rfvJ7WqM8A:9 a=WlT8qwTXB_Kj6um4hl3b:22 X-Proofpoint-GUID: XmZgzo1MXapyv_3y86irlU_BSqp7sapd X-Proofpoint-ORIG-GUID: XmZgzo1MXapyv_3y86irlU_BSqp7sapd X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.1.9,FMLib:17.12.80.40 definitions=2025-07-29_03,2025-07-28_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxlogscore=999 clxscore=1015 lowpriorityscore=0 spamscore=0 adultscore=0 suspectscore=0 bulkscore=0 malwarescore=0 priorityscore=1501 phishscore=0 mlxscore=0 impostorscore=0 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505280000 definitions=main-2507290113 Received-SPF: pass client-ip=148.163.156.1; envelope-from=sudhakar@linux.ibm.com; helo=mx0a-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org U2lnbmluZyBHUlVCIGZvciBmaXJtd2FyZSB0aGF0IHZlcmlmaWVzIGFuIGFwcGVuZGVkIHNpZ25h dHVyZSBpcyBhCmJpdCBmaWRkbHkuIEkgZG9uJ3Qgd2FudCBwZW9wbGUgdG8gaGF2ZSB0byBmaWd1 cmUgaXQgb3V0IGZyb20gc2NyYXRjaApzbyBkb2N1bWVudCBpdCBoZXJlLgoKU2lnbmVkLW9mZi1i eTogRGFuaWVsIEF4dGVucyA8ZGphQGF4dGVucy5uZXQ+ClNpZ25lZC1vZmYtYnk6IFN1ZGhha2Fy IEt1cHB1c2FteSA8c3VkaGFrYXJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0ZWZhbiBC ZXJnZXIgPHN0ZWZhbmJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IEF2bmlzaCBDaG91aGFu IDxhdm5pc2hAbGludXguaWJtLmNvbT4KLS0tCiBkb2NzL2dydWIudGV4aSB8IDk4ICsrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgOTggaW5zZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL2RvY3MvZ3J1Yi50ZXhpIGIvZG9jcy9n cnViLnRleGkKaW5kZXggNzJlZThkMDhjLi4yZmY4NjdjYzUgMTAwNjQ0Ci0tLSBhL2RvY3MvZ3J1 Yi50ZXhpCisrKyBiL2RvY3MvZ3J1Yi50ZXhpCkBAIC05Mzc5LDYgKzkzNzksMTA0IEBAIGltYWdl IHdvcmtzIHVuZGVyIFVFRkkgc2VjdXJlIGJvb3QgYW5kIGNhbiBtYWludGFpbiB0aGUgc2VjdXJl LWJvb3QgY2hhaW4uIEl0CiB3aWxsIGFsc28gYmUgbmVjZXNzYXJ5IHRvIGVucm9sbCB0aGUgcHVi bGljIGtleSB1c2VkIGludG8gYSByZWxldmFudCBmaXJtd2FyZQoga2V5IGRhdGFiYXNlLgogCitA c2VjdGlvbiBTaWduaW5nIEdSVUIgd2l0aCBhbiBhcHBlbmRlZCBzaWduYXR1cmUKK1RoZSBAZmls ZXtjb3JlLmVsZn0gaXRzZWxmIGNhbiBiZSBzaWduZWQgd2l0aCBhIExpbnV4IGtlcm5lbCBtb2R1 bGUtc3R5bGUKK2FwcGVuZGVkIHNpZ25hdHVyZS4KK1RvIHN1cHBvcnQgSUVFRTEyNzUgcGxhdGZv cm1zIHdoZXJlIHRoZSBib290IGltYWdlIGlzIG9mdGVuIGxvYWRlZCBkaXJlY3RseQorZnJvbSBh IGRpc2sgcGFydGl0aW9uIHJhdGhlciB0aGFuIGZyb20gYSBmaWxlIHN5c3RlbSwgdGhlIEBmaWxl e2NvcmUuZWxmfQorY2FuIHNwZWNpZnkgdGhlIHNpemUgYW5kIGxvY2F0aW9uIG9mIHRoZSBhcHBl bmRlZCBzaWduYXR1cmUgd2l0aCBhbiBFTEYKK05vdGUgYWRkZWQgYnkgQGNvbW1hbmR7Z3J1Yi1p bnN0YWxsfSBvciBAY29tbWFuZHtncnViLW1raW1hZ2V9LgorQW4gaW1hZ2UgY2FuIGJlIHNpZ25l ZCB0aGlzIHdheSB1c2luZyB0aGUgQGNvbW1hbmR7c2lnbi1maWxlfSBjb21tYW5kIGZyb20KK3Ro ZSBMaW51eCBrZXJuZWw6CisKK0BpdGVtaXplCitAaXRlbSBTaWduaW5nIGEgR1JVQiBpbWFnZSB1 c2luZyBzaW5nbGUgc2lnbmVyIGtleS4gVGhlIGdydWIua2V5IGlzIHlvdXIKK3ByaXZhdGUga2V5 LCBjZXJ0aWZpY2F0ZS5kZXIgaXMgeW91ciBHUlVCIHNpZ25pbmcgcHVibGljIGtleSwgYW5kCitr ZXJuZWwuZGVyIGlzIHlvdXIga2VybmVsIHNpZ25pbmcgcHVibGljIGtleS4KK0BleGFtcGxlCitA Z3JvdXAKKyMgRGV0ZXJtaW5lIHRoZSBzaXplIG9mIHRoZSBhcHBlbmRlZCBzaWduYXR1cmUuIEl0 IGRlcGVuZHMgb24gdGhlCisjIHNpZ25pbmcgY2VydGlmaWNhdGUgYW5kIHRoZSBoYXNoIGFsZ29y aXRobS4KKyMKKyMgU2lnbmluZyB0aGUgL2Rldi9udWxsIHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0 dXJlLgorCitzaWduLWZpbGUgU0hBMjU2IGdydWIua2V5IGNlcnRpZmljYXRlLmRlciAvZGV2L251 bGwgLi9lbXB0eS5zaWcKKworIyBHZXQgdGhlIHNpemUgb2YgdGhlIHNpZ25hdHVyZS4KKworRU1Q VFlfU0lHX1NJWkU9YHN0YXQgLWMgJyVzJyAuL2VtcHR5LnNpZ2AKKworIyBSZW1vdmUgdGhlIGVt cHR5IGZpbGUgc2lnbmF0dXJlLgorCitybSAuL2VtcHR5LnNpZworCisjIEJ1aWxkIGEgR1JVQiBp bWFnZSB3aXRoICRFTVBUWV9TSUdfU0laRSByZXNlcnZlZCBmb3IgdGhlIHNpZ25hdHVyZS4KKwor Z3J1Yi1pbnN0YWxsIC0tYXBwZW5kZWQtc2lnbmF0dXJlLXNpemUgJEVNUFRZX1NJR19TSVpFIFwK KyAgLS1tb2R1bGVzPSJhcHBlbmRlZHNpZyAuLi4iIC4uLgorICAgICAgICAgICAgICAgICAgICAg IG9yCitncnViLW1raW1hZ2UgLU8gcG93ZXJwYy1pZWVlMTI3NSAtbyBjb3JlLmVsZi51bnNpZ25l ZCAteCBrZXJuZWwuZGVyIFwKKyAgLXAgL2dydWIgLS1hcHBlbmRlZC1zaWduYXR1cmUtc2l6ZSAk RU1QVFlfU0lHX1NJWkUgXAorICAtLW1vZHVsZXM9ImFwcGVuZGVkc2lnIC4uLiIgLi4uCisKKyMg U2lnbmluZyBhIEdSVUIgaW1hZ2Ugd2l0aCBhbiBhcHBlbmRlZCBzaWduYXR1cmUuCisKK3NpZ24t ZmlsZSBTSEEyNTYgZ3J1Yi5rZXkgY2VydGlmaWNhdGUuZGVyIGNvcmUuZWxmLnVuc2lnbmVkIGNv cmUuZWxmLnNpZ25lZAorCitAZW5kIGdyb3VwCitAZW5kIGV4YW1wbGUKK0BpdGVtIFNpZ25pbmcg YSBHUlVCIGltYWdlIHVzaW5nIG1vcmUgdGhhbiBvbmUgc2lnbmVyIGtleS4gVGhlIGdydWIxLmtl eSBhbmQKK2dydWIyLmtleSBhcmUgeW91ciBwcml2YXRlIGtleXMsIGNlcnRpZmljYXRlMS5kZXIg YW5kIGNlcnRpZmljYXRlMi5kZXIKK2FyZSB5b3VyIEdSVUIgc2lnbmluZyBwdWJsaWMga2V5cy4g a2VybmVsLmRlciBhbmQga2VybmVsMi5kZXIgYXJlIHlvdXIKK2tlcm5lbCBzaWduaW5nIHB1Ymxp YyBrZXkuCitAZXhhbXBsZQorQGdyb3VwCisjIEdlbmVyYXRlIGEgcmF3IHNpZ25hdHVyZSBmb3Ig L2Rldi9udWxsIHNpZ25pbmcgdXNpbmcgT3BlblNTTC4KKworb3BlbnNzbCBjbXMgLXNpZ24gLWJp bmFyeSAtbm9jZXJ0cyAtaW4gL2Rldi9udWxsIC1zaWduZXIgXAorICBjZXJ0aWZpY2F0ZTEucGVt IC1pbmtleSBncnViMS5rZXkgLXNpZ25lciBjZXJ0aWZpY2F0ZTIucGVtIFwKKyAgLWlua2V5IGdy dWIyLmtleSAtb3V0IC4vZW1wdHkucDdzIC1vdXRmb3JtIERFUiAtbm9hdHRyIC1tZCBzaGEyNTYK KworIyBTaWduaW5nIHRoZSAvZGV2L251bGwgd2l0aCBhbiBhcHBlbmRlZCBzaWduYXR1cmUuCisK K3NpZ24tZmlsZSAtcyAuL2VtcHR5LnA3cyBzaGEyNTYgL2Rldi9udWxsIC9kZXYvbnVsbCAuL2Vt cHR5LnNpZ25lZAorCisjIEdldCB0aGUgc2l6ZSBvZiB0aGUgc2lnbmF0dXJlLgorCitFTVBUWV9T SUdfU0laRT1gc3RhdCAtYyAnJXMnIC4vZW1wdHkuc2lnbmVkYAorCisjIFJlbW92ZSB0aGUgZW1w dHkgZmlsZSBzaWduYXR1cmVzLgorCitybSAuL2VtcHR5LnNpZ25lZCAuL2VtcHR5LnA3cworCisj IEJ1aWxkIGEgR1JVQiBpbWFnZSB3aXRoICRFTVBUWV9TSUdfU0laRSByZXNlcnZlZCBmb3IgdGhl IHNpZ25hdHVyZS4KKworZ3J1Yi1pbnN0YWxsIC0tYXBwZW5kZWQtc2lnbmF0dXJlLXNpemUgJEVN UFRZX1NJR19TSVpFIFwKKyAgLS1tb2R1bGVzPSJhcHBlbmRlZHNpZyAuLi4iIC4uLgorICAgICAg ICAgICAgICAgICAgICAgICAgIG9yCitncnViLW1raW1hZ2UgLU8gcG93ZXJwYy1pZWVlMTI3NSAt byBjb3JlLmVsZi51bnNpZ25lZCAteCBrZXJuZWwuZGVyIFwKKyAgLXAgL2dydWIgLS1hcHBlbmRl ZC1zaWduYXR1cmUtc2l6ZSAkRU1QVFlfU0lHX1NJWkUgXAorICAtLW1vZHVsZXM9ImFwcGVuZGVk c2lnIC4uLiIgLi4uCisKKyMgR2VuZXJhdGUgYSByYXcgc2lnbmF0dXJlIGZvciBHUlVCIGltYWdl IHNpZ25pbmcgdXNpbmcgT3BlblNTTC4KKworb3BlbnNzbCBjbXMgLXNpZ24gLWJpbmFyeSAtbm9j ZXJ0cyAtaW4gY29yZS5lbGYudW5zaWduZWQgLXNpZ25lciBcCisgIGNlcnRpZmljYXRlLnBlbSAt aW5rZXkgZ3J1Yi5rZXkgLXNpZ25lciBjZXJ0aWZpY2F0ZTEucGVtIC1pbmtleSBcCisgIGdydWIx LmtleSAtb3V0IGNvcmUucDdzIC1vdXRmb3JtIERFUiAtbm9hdHRyIC1tZCBzaGEyNTYKKworIyBT aWduaW5nIGEgR1JVQiBpbWFnZSB3aXRoIGFuIGFwcGVuZGVkIHNpZ25hdHVyZS4KKworc2lnbi1m aWxlIC1zIGNvcmUucDdzIHNoYTI1NiAvZGV2L251bGwgY29yZS5lbGYudW5zaWduZWQgY29yZS5l bGYuc2lnbmVkCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhhbXBsZQorQGl0ZW0gRG9uJ3QgZm9yZ2V0 IHRvIGluc3RhbGwgdGhlIHNpZ25lZCBpbWFnZSBhcyByZXF1aXJlZAorKGUuZy4gb24gcG93ZXJw Yy1pZWVlMTI3NSwgdG8gdGhlIFBSZVAgcGFydGl0aW9uKS4KK0BlbmQgaXRlbWl6ZQorCitBcyB3 aXRoIFVFRkkgc2VjdXJlIGJvb3QsIGl0IGlzIG5lY2Vzc2FyeSB0byBidWlsZC1pbiB0aGUgcmVx dWlyZWQgbW9kdWxlcywKK29yIHNpZ24gdGhlbSBzZXBhcmF0ZWx5LgorCiBAbm9kZSBQbGF0Zm9y bSBsaW1pdGF0aW9ucwogQGNoYXB0ZXIgUGxhdGZvcm0gbGltaXRhdGlvbnMKIAotLSAKMi4zOS41 IChBcHBsZSBHaXQtMTU0KQoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCkdydWItZGV2ZWwgbWFpbGluZyBsaXN0CkdydWItZGV2ZWxAZ251Lm9yZwpodHRw czovL2xpc3RzLmdudS5vcmcvbWFpbG1hbi9saXN0aW5mby9ncnViLWRldmVsCg==