diff options
author | Lennart Poettering <lennart@poettering.net> | 2024-04-19 23:59:13 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-04-19 23:59:13 +0200 |
commit | bf49f3bb441b58c40b3e595bc5a5561051719d1c (patch) | |
tree | 6343e6baee4f9365e4dd13e2e0cd1af571a4a013 /man/systemd-stub.xml | |
parent | Merge pull request #31889 from aplanas/fix_pcrlock_stdin (diff) | |
parent | ukify: Add support for .ucode UKI section (diff) | |
download | systemd-bf49f3bb441b58c40b3e595bc5a5561051719d1c.tar.xz systemd-bf49f3bb441b58c40b3e595bc5a5561051719d1c.zip |
Merge pull request #31872 from tfg13/main
stub+ukify: Add support for UKI .ucode section
Diffstat (limited to 'man/systemd-stub.xml')
-rw-r--r-- | man/systemd-stub.xml | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/man/systemd-stub.xml b/man/systemd-stub.xml index 6a65ac33f8..e7e8a42a6d 100644 --- a/man/systemd-stub.xml +++ b/man/systemd-stub.xml @@ -70,6 +70,9 @@ <listitem><para>An <literal>.initrd</literal> section with the initrd.</para></listitem> + <listitem><para>A <literal>.ucode</literal> section with an initrd containing microcode, to be handed + to the kernel before any other initrd. This initrd must not be compressed.</para></listitem> + <listitem><para>A <literal>.splash</literal> section with an image (in the Windows <filename>.BMP</filename> format) to show on screen before invoking the kernel.</para></listitem> @@ -233,7 +236,7 @@ core kernel, the embedded initrd and kernel command line (see above for a full list).</para> <para>Also note that the Linux kernel will measure all initrds it receives into TPM PCR 9. This means - every type of initrd will be measured two or three times: the initrd embedded in the kernel image will be + every type of initrd will be measured two or three times: the initrds embedded in the kernel image will be measured to PCR 4, PCR 9 and PCR 11; the initrd synthesized from credentials (and the one synthesized from configuration extensions) will be measured to both PCR 9 and PCR 12; the initrd synthesized from system extensions will be measured to both PCR 4 and PCR 9. Let's summarize the OS resources and the PCRs @@ -275,6 +278,11 @@ </row> <row> + <entry>Microcode initrd (embedded in unified PE binary)</entry> + <entry>4 + 9 + 11</entry> + </row> + + <row> <entry>Default kernel command line (embedded in unified PE binary)</entry> <entry>4 + 11</entry> </row> |