From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 9BBC3CAC5A7 for ; Mon, 22 Sep 2025 09:36:50 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1v0csv-0002vZ-SI; Mon, 22 Sep 2025 05:31:02 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1v0csr-0002pd-Lo for grub-devel@gnu.org; Mon, 22 Sep 2025 05:30:57 -0400 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1v0csj-0007ns-57 for grub-devel@gnu.org; Mon, 22 Sep 2025 05:30:57 -0400 Received: from pps.filterd (m0353725.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 58M1K9NW008363; Mon, 22 Sep 2025 09:30:42 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=pp1; bh=G5Ondpmay327eeb6/ HhI5vaN//ECbC7/XwdHp7MA0eA=; b=Blqw6zeI6GTgo0Kqwg+Tji0iJT4EyRZzw Nc0+BJMB/hi9+mWCHktQXAYSgPP65QSU66QslaoiDht8lKUbBXL13OhV/SY08oCb CGg+johFTZOCcPKDUHIncDFj1NTalMm0ENZaBXPLqAys5DiT8hs/JCJuIpP4giYA Mtg4HnTWgCIR5TIv8nODXxn9xeM8QhujDh4oQxiHb19CzjfvOKvASa4o7FyglhRV rXApeqljJhlUJpE1kxaJUnIo2YqPUjoSekattKot9WCl5NvtwmmTc5uVbm3l8WJy xMhLrsK5rF2q8u/+Ez8qccS84TBmxXuETP0IAV/DZPsI0pgQEF5AA== Received: from ppma12.dal12v.mail.ibm.com (dc.9e.1632.ip4.static.sl-reverse.com [50.22.158.220]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 499jpk1krm-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 22 Sep 2025 09:30:42 +0000 (GMT) Received: from pps.filterd (ppma12.dal12v.mail.ibm.com [127.0.0.1]) by ppma12.dal12v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 58M7m2k7029483; Mon, 22 Sep 2025 09:30:41 GMT Received: from smtprelay02.fra02v.mail.ibm.com ([9.218.2.226]) by ppma12.dal12v.mail.ibm.com (PPS) with ESMTPS id 49a6krnnc9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 22 Sep 2025 09:30:41 +0000 Received: from smtpav07.fra02v.mail.ibm.com (smtpav07.fra02v.mail.ibm.com [10.20.54.106]) by smtprelay02.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 58M9Ub7H47972808 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 22 Sep 2025 09:30:37 GMT Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 5755620043; Mon, 22 Sep 2025 09:30:37 +0000 (GMT) Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 7820F2004B; Mon, 22 Sep 2025 09:30:34 +0000 (GMT) Received: from localhost.localdomain (unknown [9.124.218.27]) by smtpav07.fra02v.mail.ibm.com (Postfix) with ESMTP; Mon, 22 Sep 2025 09:30:34 +0000 (GMT) From: Sudhakar Kuppusamy To: grub-devel@gnu.org Cc: dja@axtens.net, jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, msuchanek@suse.com, mlewando@redhat.com, stefanb@linux.ibm.com, avnish@linux.ibm.com, nayna@linux.ibm.com, ssrish@linux.ibm.com, Sudhakar Kuppusamy , sridharm@linux.ibm.com Subject: [PATCH v12 21/22] docs/grub: Document signing GRUB with an appended signature Date: Mon, 22 Sep 2025 14:58:02 +0530 Message-ID: <20250922092814.39630-22-sudhakar@linux.ibm.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20250922092814.39630-1-sudhakar@linux.ibm.com> References: <20250922092814.39630-1-sudhakar@linux.ibm.com> MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Authority-Analysis: v=2.4 cv=L50dQ/T8 c=1 sm=1 tr=0 ts=68d11742 cx=c_pps a=bLidbwmWQ0KltjZqbj+ezA==:117 a=bLidbwmWQ0KltjZqbj+ezA==:17 a=yJojWOMRYYMA:10 a=JuTF4qcAAAAA:8 a=VnNF1IyMAAAA:8 a=BlRlUMKLR4rfvJ7WqM8A:9 a=WlT8qwTXB_Kj6um4hl3b:22 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwOTIwMDAxMCBTYWx0ZWRfXytM3bJdDrDE0 RphXaLYik2posr9y3SasnhZflbzqu2KqafggB/LZqGGmeMxlRMTXDpj1oFFUGDEBz7FVgjvHxBG 7ZW8DkmdwndbrVHbAN2pvgalVmofTvktn/iE8NOqtnmYnRADUFFXGiIsmzMb4rklhl0e+UR+TL0 Qlrf59ab122ZQkvkpfvpDGz76/ntzOeJKlDdDlhvP+etr8wqGJlKlX9ON0sCPQKM8mx41swd5/+ yDcoi+3ulQgsEjnHmO2mYYBgvijLPQEZAI/KveZOBIXzGeA0PpTxYrnFlnYwvIa088jZNKbOAZl zGdWiw7+r6c35HE/StnOs2d2QD5qNdowIN7autYYfig4yyDweo6Ro83RsFml7V7TeLkMB6IvS5R +q9H+qa3 X-Proofpoint-ORIG-GUID: Pxf4XejuBO9Snc3Rnf9XyFLAreLlHNiY X-Proofpoint-GUID: Pxf4XejuBO9Snc3Rnf9XyFLAreLlHNiY X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1117,Hydra:6.1.9,FMLib:17.12.80.40 definitions=2025-09-22_01,2025-09-19_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 malwarescore=0 adultscore=0 phishscore=0 impostorscore=0 spamscore=0 priorityscore=1501 suspectscore=0 clxscore=1015 bulkscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2507300000 definitions=main-2509200010 Received-SPF: pass client-ip=148.163.158.5; envelope-from=sudhakar@linux.ibm.com; helo=mx0b-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org U2lnbmluZyBHUlVCIGZvciBmaXJtd2FyZSB0aGF0IHZlcmlmaWVzIGFuIGFwcGVuZGVkIHNpZ25h dHVyZSBpcyBhCmJpdCBmaWRkbHkuIEkgZG9uJ3Qgd2FudCBwZW9wbGUgdG8gaGF2ZSB0byBmaWd1 cmUgaXQgb3V0IGZyb20gc2NyYXRjaApzbyBkb2N1bWVudCBpdCBoZXJlLgoKU2lnbmVkLW9mZi1i eTogRGFuaWVsIEF4dGVucyA8ZGphQGF4dGVucy5uZXQ+ClNpZ25lZC1vZmYtYnk6IFN1ZGhha2Fy IEt1cHB1c2FteSA8c3VkaGFrYXJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0ZWZhbiBC ZXJnZXIgPHN0ZWZhbmJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IEF2bmlzaCBDaG91aGFu IDxhdm5pc2hAbGludXguaWJtLmNvbT4KLS0tCiBkb2NzL2dydWIudGV4aSB8IDEwMiArKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgMTAyIGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9kb2NzL2dydWIudGV4aSBiL2RvY3Mv Z3J1Yi50ZXhpCmluZGV4IDM1ODk3NWZjOC4uNzQ3NzdjMDQwIDEwMDY0NAotLS0gYS9kb2NzL2dy dWIudGV4aQorKysgYi9kb2NzL2dydWIudGV4aQpAQCAtOTYxMSw2ICs5NjExLDEwOCBAQCBpbWFn ZSB3b3JrcyB1bmRlciBVRUZJIHNlY3VyZSBib290IGFuZCBjYW4gbWFpbnRhaW4gdGhlIHNlY3Vy ZS1ib290IGNoYWluLiBJdAogd2lsbCBhbHNvIGJlIG5lY2Vzc2FyeSB0byBlbnJvbGwgdGhlIHB1 YmxpYyBrZXkgdXNlZCBpbnRvIGEgcmVsZXZhbnQgZmlybXdhcmUKIGtleSBkYXRhYmFzZS4KIAor QHNlY3Rpb24gU2lnbmluZyBHUlVCIHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlCitUaGUgQGZp bGV7Y29yZS5lbGZ9IGl0c2VsZiBjYW4gYmUgc2lnbmVkIHdpdGggYSBMaW51eCBrZXJuZWwgbW9k dWxlLXN0eWxlCithcHBlbmRlZCBzaWduYXR1cmUgKEBweHJlZntVc2luZyBhcHBlbmRlZCBzaWdu YXR1cmVzfSkuCitUbyBzdXBwb3J0IElFRUUxMjc1IHBsYXRmb3JtcyB3aGVyZSB0aGUgYm9vdCBp bWFnZSBpcyBvZnRlbiBsb2FkZWQgZGlyZWN0bHkKK2Zyb20gYSBkaXNrIHBhcnRpdGlvbiByYXRo ZXIgdGhhbiBmcm9tIGEgZmlsZSBzeXN0ZW0sIHRoZSBAZmlsZXtjb3JlLmVsZn0KK2NhbiBzcGVj aWZ5IHRoZSBzaXplIGFuZCBsb2NhdGlvbiBvZiB0aGUgYXBwZW5kZWQgc2lnbmF0dXJlIHdpdGgg YW4gRUxGCitOb3RlIGFkZGVkIGJ5IEBjb21tYW5ke2dydWItaW5zdGFsbH0gb3IgQGNvbW1hbmR7 Z3J1Yi1ta2ltYWdlfS4KK0FuIGltYWdlIGNhbiBiZSBzaWduZWQgdGhpcyB3YXkgdXNpbmcgdGhl IEBjb21tYW5ke3NpZ24tZmlsZX0gY29tbWFuZCBmcm9tCit0aGUgTGludXgga2VybmVsOgorCitA aXRlbWl6ZQorQGl0ZW0gU2lnbmluZyBhIEdSVUIgaW1hZ2UgdXNpbmcgYSBzaW5nbGUgc2lnbmVy IGtleS4gVGhlIGdydWIua2V5IGlzIHlvdXIKK3ByaXZhdGUga2V5IHVzZWQgZm9yIEdSVUIgc2ln bmluZywgZ3J1Yi5kZXIgaXMgYSBjb3JyZXNwb25kaW5nIHB1YmxpYyBrZXkKKyhjZXJ0aWZpY2F0 ZSkgdXNlZCBmb3IgR1JVQiBzaWduYXR1cmUgdmVyaWZpY2F0aW9uLCBhbmQgdGhlIGtlcm5lbC5k ZXIgaXMKK3lvdXIgcHVibGljIGtleSAoY2VydGlmaWNhdGUpIHVzZWQgZm9yIGtlcm5lbCBzaWdu YXR1cmUgdmVyaWZpY2F0aW9uLgorQGV4YW1wbGUKK0Bncm91cAorIyBEZXRlcm1pbmUgdGhlIHNp emUgb2YgdGhlIGFwcGVuZGVkIHNpZ25hdHVyZS4gSXQgZGVwZW5kcyBvbiB0aGUKKyMgc2lnbmlu ZyBrZXkgYW5kIHRoZSBoYXNoIGFsZ29yaXRobS4KKyMKKyMgU2lnbmluZyB0aGUgL2Rldi9udWxs IHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlLgorCitzaWduLWZpbGUgU0hBMjU2IGdydWIua2V5 IGdydWIuZGVyIC9kZXYvbnVsbCAuL2VtcHR5LnNpZworCisjIEdldCB0aGUgc2l6ZSBvZiB0aGUg c2lnbmF0dXJlLgorCitFTVBUWV9TSUdfU0laRT1gc3RhdCAtYyAnJXMnIC4vZW1wdHkuc2lnYAor CisjIFJlbW92ZSB0aGUgZW1wdHkgZmlsZSBzaWduYXR1cmUuCisKK3JtIC4vZW1wdHkuc2lnCisK KyMgQnVpbGQgYSBHUlVCIGltYWdlIHdpdGggJEVNUFRZX1NJR19TSVpFIHJlc2VydmVkIGZvciB0 aGUgc2lnbmF0dXJlLgorCitncnViLW1raW1hZ2UgLU8gcG93ZXJwYy1pZWVlMTI3NSAtbyBjb3Jl LmVsZi51bnNpZ25lZCAteCBrZXJuZWwuZGVyIFwKKyAgLXAgL2dydWIgLS1hcHBlbmRlZC1zaWdu YXR1cmUtc2l6ZSAkRU1QVFlfU0lHX1NJWkUgXAorICAtLW1vZHVsZXM9ImFwcGVuZGVkc2lnIC4u LiIgLi4uCisKKyMgU2lnbmluZyBhIEdSVUIgaW1hZ2Ugd2l0aCBhbiBhcHBlbmRlZCBzaWduYXR1 cmUuCisKK3NpZ24tZmlsZSBTSEEyNTYgZ3J1Yi5rZXkgZ3J1Yi5kZXIgY29yZS5lbGYudW5zaWdu ZWQgY29yZS5lbGYuc2lnbmVkCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhhbXBsZQorQGl0ZW0gU2ln bmluZyBhIEdSVUIgaW1hZ2UgdXNpbmcgbW9yZSB0aGFuIG9uZSBzaWduZXIga2V5LiBUaGUgZ3J1 YjEua2V5IGFuZAorZ3J1YjIua2V5IGFyZSBwcml2YXRlIGtleXMgdXNlZCBmb3IgR1JVQiBzaWdu aW5nLCBncnViMS5kZXIgYW5kIGdydWIyLmRlcgorYXJlIGNvcnJlc3BvbmRpbmcgcHVibGljIGtl eXMgKGNlcnRpZmljYXRlcykgdXNlZCBmb3IgR1JVQiBzaWduYXR1cmUgdmVyaWZpY2F0aW9uLgor VGhlIGtlcm5lbDEuZGVyIGFuZCBrZXJuZWwyLmRlciBhcmUgeW91ciBwdWJsaWMga2V5cyAoY2Vy dGlmaWNhdGVzKSB1c2VkIGZvcgora2VybmVsIHNpZ25hdHVyZSB2ZXJpZmljYXRpb24uCitAZXhh bXBsZQorQGdyb3VwCisjIEdlbmVyYXRlIGEgcmF3IHNpZ25hdHVyZSBmb3IgL2Rldi9udWxsIHNp Z25pbmcgdXNpbmcgT3BlblNTTC4KKworb3BlbnNzbCBjbXMgLXNpZ24gLWJpbmFyeSAtbm9jZXJ0 cyAtaW4gL2Rldi9udWxsIC1zaWduZXIgXAorICBncnViMS5kZXIgLWlua2V5IGdydWIxLmtleSAt c2lnbmVyIGdydWIyLmRlciAtaW5rZXkgZ3J1YjIua2V5IFwKKyAgLW91dCAuL2VtcHR5LnA3cyAt b3V0Zm9ybSBERVIgLW5vYXR0ciAtbWQgc2hhMjU2CisKKyMgU2lnbmluZyB0aGUgL2Rldi9udWxs IHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlLgorCitzaWduLWZpbGUgLXMgLi9lbXB0eS5wN3Mg c2hhMjU2IC9kZXYvbnVsbCAvZGV2L251bGwgLi9lbXB0eS5zaWduZWQKKworIyBHZXQgdGhlIHNp emUgb2YgdGhlIHNpZ25hdHVyZS4KKworRU1QVFlfU0lHX1NJWkU9YHN0YXQgLWMgJyVzJyAuL2Vt cHR5LnNpZ25lZGAKKworIyBSZW1vdmUgdGhlIGVtcHR5IGZpbGUgc2lnbmF0dXJlcy4KKworcm0g Li9lbXB0eS5zaWduZWQgLi9lbXB0eS5wN3MKKworIyBCdWlsZCBhIEdSVUIgaW1hZ2Ugd2l0aCAk RU1QVFlfU0lHX1NJWkUgcmVzZXJ2ZWQgZm9yIHRoZSBzaWduYXR1cmUuCisKK2dydWItbWtpbWFn ZSAtTyBwb3dlcnBjLWllZWUxMjc1IC1vIGNvcmUuZWxmLnVuc2lnbmVkIC14IGtlcm5lbDEuZGVy IFwKKyAga2VybmVsMi5kZXIgLXAgL2dydWIgLS1hcHBlbmRlZC1zaWduYXR1cmUtc2l6ZSAkRU1Q VFlfU0lHX1NJWkUgXAorICAtLW1vZHVsZXM9ImFwcGVuZGVkc2lnIC4uLiIgLi4uCisKKyMgR2Vu ZXJhdGUgYSByYXcgc2lnbmF0dXJlIGZvciBHUlVCIGltYWdlIHNpZ25pbmcgdXNpbmcgT3BlblNT TC4KKworb3BlbnNzbCBjbXMgLXNpZ24gLWJpbmFyeSAtbm9jZXJ0cyAtaW4gY29yZS5lbGYudW5z aWduZWQgLXNpZ25lciBcCisgIGdydWIxLmRlciAtaW5rZXkgZ3J1YjEua2V5IC1zaWduZXIgZ3J1 YjIuZGVyIC1pbmtleSBncnViMi5rZXkgXAorICAtb3V0IGNvcmUucDdzIC1vdXRmb3JtIERFUiAt bm9hdHRyIC1tZCBzaGEyNTYKKworIyBTaWduaW5nIGEgR1JVQiBpbWFnZSB3aXRoIGFuIGFwcGVu ZGVkIHNpZ25hdHVyZS4KKworc2lnbi1maWxlIC1zIGNvcmUucDdzIHNoYTI1NiAvZGV2L251bGwg Y29yZS5lbGYudW5zaWduZWQgY29yZS5lbGYuc2lnbmVkCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhh bXBsZQorQGl0ZW0gRG9uJ3QgZm9yZ2V0IHRvIGluc3RhbGwgdGhlIHNpZ25lZCBpbWFnZSBhcyBy ZXF1aXJlZAorKGUuZy4gb24gcG93ZXJwYy1pZWVlMTI3NSwgdG8gdGhlIFBSZVAgcGFydGl0aW9u KS4KK0BleGFtcGxlCitAZ3JvdXAKKyMgSW5zdGFsbCBzaWduZWQgR1JVQiBpbWFnZSB0byB0aGUg UFJlUCBwYXJ0aXRpb24gb24gcG93ZXJwYy1pZWVlMTI3NQorCitkZCBpZj1jb3JlLmVsZi5zaWdu ZWQgb2Y9L2Rldi9zZGExCisKK0BlbmQgZ3JvdXAKK0BlbmQgZXhhbXBsZQorQGVuZCBpdGVtaXpl CisKK0FzIHdpdGggVUVGSSBzZWN1cmUgYm9vdCwgaXQgaXMgbmVjZXNzYXJ5IHRvIGJ1aWxkLWlu IHRoZSByZXF1aXJlZCBtb2R1bGVzLAorb3Igc2lnbiB0aGVtIGlmIHRoZXkgYXJlIG5vdCBwYXJ0 IG9mIHRoZSBHUlVCIGltYWdlLgorCiBAbm9kZSBQbGF0Zm9ybSBsaW1pdGF0aW9ucwogQGNoYXB0 ZXIgUGxhdGZvcm0gbGltaXRhdGlvbnMKIAotLSAKMi41MC4xIChBcHBsZSBHaXQtMTU1KQoKCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkdydWItZGV2ZWwg bWFpbGluZyBsaXN0CkdydWItZGV2ZWxAZ251Lm9yZwpodHRwczovL2xpc3RzLmdudS5vcmcvbWFp bG1hbi9saXN0aW5mby9ncnViLWRldmVsCg==