From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 7FDC3CCA470 for ; Tue, 30 Sep 2025 11:50:53 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1v3Ypi-0001Rq-Qw; Tue, 30 Sep 2025 07:47:50 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1v3YpD-00014w-FE for grub-devel@gnu.org; Tue, 30 Sep 2025 07:47:23 -0400 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1v3Yp0-0006X7-Ed for grub-devel@gnu.org; Tue, 30 Sep 2025 07:47:16 -0400 Received: from pps.filterd (m0353725.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 58U8GDke013451; Tue, 30 Sep 2025 11:47:00 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=pp1; bh=9DUAHrlOd1eCznh6B ZF+4xVXDhz9BR3RflbL7ZS4J/k=; b=SEvBbM6aMqpXiVe4qNJB6k5FAwgI6979+ b5jQZayD91k7Dcn4dfgAIBc34f30th8NF7hJjzli1Rpv/ykEUC5Qtk4+zT0tFcfJ 5Dm3GnIevoHNULgMZP6/TxeLM3PX30ryuakfHfIt2hdrpS7lpFNS6yuHS8ltFft2 lTkC2JazyBrDEZKKbJos8n/91YT43729fpegPhhSvx6tSVQ0OOmpHKGy8ldRmuH1 5m6WZHo3p0wdP+VJ24sWwQM3rRm+tmuEx03AXR7ALRw3GLKOifWBYnAS449xZY6k oqw5cRv0L11yn5LaGaAxxA/a/XhIZW1jnyi2K1BdA6Ci49ZrcWgeQ== Received: from ppma21.wdc07v.mail.ibm.com (5b.69.3da9.ip4.static.sl-reverse.com [169.61.105.91]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 49e6bhg93q-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 30 Sep 2025 11:47:00 +0000 (GMT) Received: from pps.filterd (ppma21.wdc07v.mail.ibm.com [127.0.0.1]) by ppma21.wdc07v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 58U9JqWq026818; Tue, 30 Sep 2025 11:46:59 GMT Received: from smtprelay03.fra02v.mail.ibm.com ([9.218.2.224]) by ppma21.wdc07v.mail.ibm.com (PPS) with ESMTPS id 49eu8mu54n-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 30 Sep 2025 11:46:59 +0000 Received: from smtpav01.fra02v.mail.ibm.com (smtpav01.fra02v.mail.ibm.com [10.20.54.100]) by smtprelay03.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 58UBkthQ59441452 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 30 Sep 2025 11:46:55 GMT Received: from smtpav01.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 862FE20043; Tue, 30 Sep 2025 11:46:55 +0000 (GMT) Received: from smtpav01.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id D398A20040; Tue, 30 Sep 2025 11:46:51 +0000 (GMT) Received: from localhost.localdomain (unknown [9.39.16.143]) by smtpav01.fra02v.mail.ibm.com (Postfix) with ESMTP; Tue, 30 Sep 2025 11:46:51 +0000 (GMT) From: Sudhakar Kuppusamy To: grub-devel@gnu.org Cc: dja@axtens.net, jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, msuchanek@suse.com, mlewando@redhat.com, stefanb@linux.ibm.com, avnish@linux.ibm.com, nayna@linux.ibm.com, ssrish@linux.ibm.com, Sudhakar Kuppusamy , sridharm@linux.ibm.com, Daniel Kiper Subject: [PATCH v13 19/20] docs/grub: Document signing GRUB with an appended signature Date: Tue, 30 Sep 2025 17:10:13 +0530 Message-ID: <20250930114018.78215-20-sudhakar@linux.ibm.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20250930114018.78215-1-sudhakar@linux.ibm.com> References: <20250930114018.78215-1-sudhakar@linux.ibm.com> MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Authority-Analysis: v=2.4 cv=Se/6t/Ru c=1 sm=1 tr=0 ts=68dbc334 cx=c_pps a=GFwsV6G8L6GxiO2Y/PsHdQ==:117 a=GFwsV6G8L6GxiO2Y/PsHdQ==:17 a=yJojWOMRYYMA:10 a=JuTF4qcAAAAA:8 a=VnNF1IyMAAAA:8 a=yPCof4ZbAAAA:8 a=BlRlUMKLR4rfvJ7WqM8A:9 a=WlT8qwTXB_Kj6um4hl3b:22 a=cPQSjfK2_nFv0Q5t_7PE:22 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwOTI3MDAxMCBTYWx0ZWRfX41WvWwjAYSDn PPIKThyh7S1Fg4r45ECOX/qF20GLddRAX2PN6cHyVhUkqxwYsL6XfVuGQCA58A+f2jrblzPCxtt o8k5qDZywnj7H3LskNXIbwRuEioJ2kGcEJu3Iy108zijE7EssLKyY1B3lYA3aC8YFn+nDsEGOqp V8ckJpGcEFPvgbCHvrReIbqfbOgNi+lVxIic0SUNEHRU+sGM7x3pH4HPpPsIXtlrLlQX6A/ReiK 0vWGWvKDuakkR2XdO6lrGn2OjMVOQElGtcrZYlYS73n+m8AW3FNDfSHKSkszboM4bNwNzmKWO8k GgMSKzwr7/nljxcKHqBm0oKSJu6iIRBo1qmXSb2BU+baX2dQCCzRSeTSt1azcTno7bUJWmAK8lf BMi1DI16jCfgda1J+6M2fdbEO2xCsA== X-Proofpoint-GUID: kJNu9MZP9OBZBCD1b0QK5Pb4vDEpodmi X-Proofpoint-ORIG-GUID: kJNu9MZP9OBZBCD1b0QK5Pb4vDEpodmi X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1117,Hydra:6.1.9,FMLib:17.12.80.40 definitions=2025-09-30_01,2025-09-29_04,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 impostorscore=0 malwarescore=0 suspectscore=0 bulkscore=0 lowpriorityscore=0 clxscore=1015 phishscore=0 priorityscore=1501 adultscore=0 spamscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2509150000 definitions=main-2509270010 Received-SPF: pass client-ip=148.163.158.5; envelope-from=sudhakar@linux.ibm.com; helo=mx0b-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org U2lnbmluZyBHUlVCIGZvciBmaXJtd2FyZSB0aGF0IHZlcmlmaWVzIGFuIGFwcGVuZGVkIHNpZ25h dHVyZSBpcyBhCmJpdCBmaWRkbHkuIEkgZG9uJ3Qgd2FudCBwZW9wbGUgdG8gaGF2ZSB0byBmaWd1 cmUgaXQgb3V0IGZyb20gc2NyYXRjaApzbyBkb2N1bWVudCBpdCBoZXJlLgoKU2lnbmVkLW9mZi1i eTogRGFuaWVsIEF4dGVucyA8ZGphQGF4dGVucy5uZXQ+ClNpZ25lZC1vZmYtYnk6IFN1ZGhha2Fy IEt1cHB1c2FteSA8c3VkaGFrYXJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0ZWZhbiBC ZXJnZXIgPHN0ZWZhbmJAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IEF2bmlzaCBDaG91aGFu IDxhdm5pc2hAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6IERhbmllbCBLaXBlciA8ZGFuaWVs LmtpcGVyQG9yYWNsZS5jb20+Ci0tLQogZG9jcy9ncnViLnRleGkgfCA5NCArKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKwogMSBmaWxlIGNoYW5nZWQsIDk0 IGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9kb2NzL2dydWIudGV4aSBiL2RvY3MvZ3J1Yi50 ZXhpCmluZGV4IDM1ODk3NWZjOC4uYjg3YTMyZWE5IDEwMDY0NAotLS0gYS9kb2NzL2dydWIudGV4 aQorKysgYi9kb2NzL2dydWIudGV4aQpAQCAtOTYxMSw2ICs5NjExLDEwMCBAQCBpbWFnZSB3b3Jr cyB1bmRlciBVRUZJIHNlY3VyZSBib290IGFuZCBjYW4gbWFpbnRhaW4gdGhlIHNlY3VyZS1ib290 IGNoYWluLiBJdAogd2lsbCBhbHNvIGJlIG5lY2Vzc2FyeSB0byBlbnJvbGwgdGhlIHB1YmxpYyBr ZXkgdXNlZCBpbnRvIGEgcmVsZXZhbnQgZmlybXdhcmUKIGtleSBkYXRhYmFzZS4KIAorQHNlY3Rp b24gU2lnbmluZyBHUlVCIHdpdGggYW4gYXBwZW5kZWQgc2lnbmF0dXJlCitUaGUgQGZpbGV7Y29y ZS5lbGZ9IGl0c2VsZiBjYW4gYmUgc2lnbmVkIHdpdGggYSBMaW51eCBrZXJuZWwgbW9kdWxlLXN0 eWxlCithcHBlbmRlZCBzaWduYXR1cmUgKEBweHJlZntVc2luZyBhcHBlbmRlZCBzaWduYXR1cmVz fSkuCitUbyBzdXBwb3J0IElFRUUxMjc1IHBsYXRmb3JtcyB3aGVyZSB0aGUgYm9vdCBpbWFnZSBp cyBvZnRlbiBsb2FkZWQgZGlyZWN0bHkKK2Zyb20gYSBkaXNrIHBhcnRpdGlvbiByYXRoZXIgdGhh biBmcm9tIGEgZmlsZSBzeXN0ZW0sIHRoZSBAZmlsZXtjb3JlLmVsZn0KK2NhbiBzcGVjaWZ5IHRo ZSBzaXplIGFuZCBsb2NhdGlvbiBvZiB0aGUgYXBwZW5kZWQgc2lnbmF0dXJlIHdpdGggYW4gRUxG CitOb3RlIGFkZGVkIGJ5IEBjb21tYW5ke2dydWItaW5zdGFsbH0gb3IgQGNvbW1hbmR7Z3J1Yi1t a2ltYWdlfS4KK0FuIGltYWdlIGNhbiBiZSBzaWduZWQgdGhpcyB3YXkgdXNpbmcgdGhlIEBjb21t YW5ke3NpZ24tZmlsZX0gY29tbWFuZCBmcm9tCit0aGUgTGludXgga2VybmVsOgorCitAaXRlbWl6 ZQorQGl0ZW0gU2lnbmluZyBhIEdSVUIgaW1hZ2UgdXNpbmcgYSBzaW5nbGUgc2lnbmVyIGtleS4g VGhlIGdydWIua2V5IGlzIHlvdXIKK3ByaXZhdGUga2V5IHVzZWQgZm9yIEdSVUIgc2lnbmluZywg Z3J1Yi5kZXIgaXMgYSBjb3JyZXNwb25kaW5nIHB1YmxpYyBrZXkKKyhjZXJ0aWZpY2F0ZSkgdXNl ZCBmb3IgR1JVQiBzaWduYXR1cmUgdmVyaWZpY2F0aW9uLCBhbmQgdGhlIGtlcm5lbC5kZXIgaXMK K3lvdXIgcHVibGljIGtleSAoY2VydGlmaWNhdGUpIHVzZWQgZm9yIGtlcm5lbCBzaWduYXR1cmUg dmVyaWZpY2F0aW9uLgorQGV4YW1wbGUKK0Bncm91cAorIyBEZXRlcm1pbmUgdGhlIHNpemUgb2Yg dGhlIGFwcGVuZGVkIHNpZ25hdHVyZS4gSXQgZGVwZW5kcyBvbiB0aGUKKyMgc2lnbmluZyBrZXkg YW5kIHRoZSBoYXNoIGFsZ29yaXRobS4KKyMKKyMgU2lnbmluZyB0aGUgL2Rldi9udWxsIHdpdGgg YW4gYXBwZW5kZWQgc2lnbmF0dXJlLgorCitzaWduLWZpbGUgU0hBMjU2IGdydWIua2V5IGdydWIu ZGVyIC9kZXYvbnVsbCAuL2VtcHR5LnNpZworCisjIEJ1aWxkIGEgR1JVQiBpbWFnZSBmb3IgdGhl IHNpZ25hdHVyZS4KKworZ3J1Yi1ta2ltYWdlIC1PIHBvd2VycGMtaWVlZTEyNzUgLW8gY29yZS5l bGYudW5zaWduZWQgLXgga2VybmVsLmRlciBcCisgIC1wIC9ncnViIC0tYXBwZW5kZWQtc2lnbmF0 dXJlLXNpemUgJChzdGF0IC1jICclcycgLi9lbXB0eS5zaWcpIFwKKyAgLS1tb2R1bGVzPSJhcHBl bmRlZHNpZyAuLi4iIC4uLgorCisjIFJlbW92ZSB0aGUgZW1wdHkgZmlsZS4KKworcm0gLi9lbXB0 eS5zaWcKKworIyBTaWduaW5nIGEgR1JVQiBpbWFnZSB3aXRoIGFuIGFwcGVuZGVkIHNpZ25hdHVy ZS4KKworc2lnbi1maWxlIFNIQTI1NiBncnViLmtleSBncnViLmRlciBjb3JlLmVsZi51bnNpZ25l ZCBjb3JlLmVsZi5zaWduZWQKKworQGVuZCBncm91cAorQGVuZCBleGFtcGxlCitAaXRlbSBTaWdu aW5nIGEgR1JVQiBpbWFnZSB1c2luZyBtb3JlIHRoYW4gb25lIHNpZ25lciBrZXkuIFRoZSBncnVi MS5rZXkgYW5kCitncnViMi5rZXkgYXJlIHByaXZhdGUga2V5cyB1c2VkIGZvciBHUlVCIHNpZ25p bmcsIGdydWIxLmRlciBhbmQgZ3J1YjIuZGVyCithcmUgY29ycmVzcG9uZGluZyBwdWJsaWMga2V5 cyAoY2VydGlmaWNhdGVzKSB1c2VkIGZvciBHUlVCIHNpZ25hdHVyZSB2ZXJpZmljYXRpb24uCitU aGUga2VybmVsMS5kZXIgYW5kIGtlcm5lbDIuZGVyIGFyZSB5b3VyIHB1YmxpYyBrZXlzIChjZXJ0 aWZpY2F0ZXMpIHVzZWQgZm9yCitrZXJuZWwgc2lnbmF0dXJlIHZlcmlmaWNhdGlvbi4KK0BleGFt cGxlCitAZ3JvdXAKKyMgR2VuZXJhdGUgYSByYXcgc2lnbmF0dXJlIGZvciAvZGV2L251bGwgc2ln bmluZyB1c2luZyBPcGVuU1NMLgorCitvcGVuc3NsIGNtcyAtc2lnbiAtYmluYXJ5IC1ub2NlcnRz IC1pbiAvZGV2L251bGwgLXNpZ25lciBcCisgIGdydWIxLmRlciAtaW5rZXkgZ3J1YjEua2V5IC1z aWduZXIgZ3J1YjIuZGVyIC1pbmtleSBncnViMi5rZXkgXAorICAtb3V0IC4vZW1wdHkucDdzIC1v dXRmb3JtIERFUiAtbm9hdHRyIC1tZCBzaGEyNTYKKworIyBTaWduaW5nIHRoZSAvZGV2L251bGwg d2l0aCBhbiBhcHBlbmRlZCBzaWduYXR1cmUuCisKK3NpZ24tZmlsZSAtcyAuL2VtcHR5LnA3cyBz aGEyNTYgL2Rldi9udWxsIC9kZXYvbnVsbCAuL2VtcHR5LnNpZworCisjIEJ1aWxkIGEgR1JVQiBp bWFnZSBmb3IgdGhlIHNpZ25hdHVyZS4KKworZ3J1Yi1ta2ltYWdlIC1PIHBvd2VycGMtaWVlZTEy NzUgLW8gY29yZS5lbGYudW5zaWduZWQgLXgga2VybmVsMS5kZXIgXAorICBrZXJuZWwyLmRlciAt cCAvZ3J1YiAtLWFwcGVuZGVkLXNpZ25hdHVyZS1zaXplICQoc3RhdCAtYyAnJXMnIC4vZW1wdHku c2lnKSBcCisgIC0tbW9kdWxlcz0iYXBwZW5kZWRzaWcgLi4uIiAuLi4KKworIyBSZW1vdmUgdGhl IGVtcHR5IGZpbGVzLgorCitybSAuL2VtcHR5LnNpZyAuL2VtcHR5LnA3cworCisjIEdlbmVyYXRl IGEgcmF3IHNpZ25hdHVyZSBmb3IgR1JVQiBpbWFnZSBzaWduaW5nIHVzaW5nIE9wZW5TU0wuCisK K29wZW5zc2wgY21zIC1zaWduIC1iaW5hcnkgLW5vY2VydHMgLWluIGNvcmUuZWxmLnVuc2lnbmVk IC1zaWduZXIgXAorICBncnViMS5kZXIgLWlua2V5IGdydWIxLmtleSAtc2lnbmVyIGdydWIyLmRl ciAtaW5rZXkgZ3J1YjIua2V5IFwKKyAgLW91dCBjb3JlLnA3cyAtb3V0Zm9ybSBERVIgLW5vYXR0 ciAtbWQgc2hhMjU2CisKKyMgU2lnbmluZyBhIEdSVUIgaW1hZ2Ugd2l0aCBhbiBhcHBlbmRlZCBz aWduYXR1cmUuCisKK3NpZ24tZmlsZSAtcyBjb3JlLnA3cyBzaGEyNTYgL2Rldi9udWxsIGNvcmUu ZWxmLnVuc2lnbmVkIGNvcmUuZWxmLnNpZ25lZAorCitAZW5kIGdyb3VwCitAZW5kIGV4YW1wbGUK K0BpdGVtIERvbid0IGZvcmdldCB0byBpbnN0YWxsIHRoZSBzaWduZWQgaW1hZ2UgYXMgcmVxdWly ZWQKKyhlLmcuIG9uIHBvd2VycGMtaWVlZTEyNzUsIHRvIHRoZSBQUmVQIHBhcnRpdGlvbikuCitA ZXhhbXBsZQorQGdyb3VwCisjIEluc3RhbGwgc2lnbmVkIEdSVUIgaW1hZ2UgdG8gdGhlIFBSZVAg cGFydGl0aW9uIG9uIHBvd2VycGMtaWVlZTEyNzUKKworZGQgaWY9Y29yZS5lbGYuc2lnbmVkIG9m PS9kZXYvc2RhMQorCitAZW5kIGdyb3VwCitAZW5kIGV4YW1wbGUKK0BlbmQgaXRlbWl6ZQorCitB cyB3aXRoIFVFRkkgc2VjdXJlIGJvb3QsIGl0IGlzIG5lY2Vzc2FyeSB0byBidWlsZC1pbiB0aGUg cmVxdWlyZWQgbW9kdWxlcywKK29yIHNpZ24gdGhlbSBpZiB0aGV5IGFyZSBub3QgcGFydCBvZiB0 aGUgR1JVQiBpbWFnZS4KKwogQG5vZGUgUGxhdGZvcm0gbGltaXRhdGlvbnMKIEBjaGFwdGVyIFBs YXRmb3JtIGxpbWl0YXRpb25zCiAKLS0gCjIuNTAuMSAoQXBwbGUgR2l0LTE1NSkKCgpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpHcnViLWRldmVsIG1haWxp bmcgbGlzdApHcnViLWRldmVsQGdudS5vcmcKaHR0cHM6Ly9saXN0cy5nbnUub3JnL21haWxtYW4v bGlzdGluZm8vZ3J1Yi1kZXZlbAo=