[Bug 2002226] Re: Support for kernels compiled with CONFIG_EFI_ZBOOT

[Dimitri John Ledkov]

Reading our grub code, I believe this needs to be a dual fix:
1) fix arm64 secureboot code path
2) fix riscv64 non-secureboot code path


(separtely in mattermost Need to merge https://github.com/rhboot/grub2/commit/9752abcb38119b8fa52ba06e651e220c750e26c1 I think was also mentioned by juliank)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-unsigned in Ubuntu.
https://bugs.launchpad.net/bugs/2002226

Title:
  Support for kernels compiled with CONFIG_EFI_ZBOOT

Status in grub2 package in Ubuntu:
  New
Status in grub2-unsigned package in Ubuntu:
  New

Bug description:
  [Impact]
  Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel.

  We should eliminate the following check:

  grub-core/loader/efi/linux.c:75:
    if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE)
      return grub_error(GRUB_ERR_BAD_OS, "invalid magic number");

  This will allow any EFI binary to be run using the linux command.

  [Test plan]
  TBD

  [Where problems could occur]
  TBD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2002226/+subscriptions