summaryrefslogtreecommitdiffstats
path: root/man/systemd-stub.xml
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2024-04-19 23:59:13 +0200
committerGitHub <noreply@github.com>2024-04-19 23:59:13 +0200
commitbf49f3bb441b58c40b3e595bc5a5561051719d1c (patch)
tree6343e6baee4f9365e4dd13e2e0cd1af571a4a013 /man/systemd-stub.xml
parentMerge pull request #31889 from aplanas/fix_pcrlock_stdin (diff)
parentukify: Add support for .ucode UKI section (diff)
downloadsystemd-bf49f3bb441b58c40b3e595bc5a5561051719d1c.tar.xz
systemd-bf49f3bb441b58c40b3e595bc5a5561051719d1c.zip
Merge pull request #31872 from tfg13/main
stub+ukify: Add support for UKI .ucode section
Diffstat (limited to 'man/systemd-stub.xml')
-rw-r--r--man/systemd-stub.xml10
1 files changed, 9 insertions, 1 deletions
diff --git a/man/systemd-stub.xml b/man/systemd-stub.xml
index 6a65ac33f8..e7e8a42a6d 100644
--- a/man/systemd-stub.xml
+++ b/man/systemd-stub.xml
@@ -70,6 +70,9 @@
<listitem><para>An <literal>.initrd</literal> section with the initrd.</para></listitem>
+ <listitem><para>A <literal>.ucode</literal> section with an initrd containing microcode, to be handed
+ to the kernel before any other initrd. This initrd must not be compressed.</para></listitem>
+
<listitem><para>A <literal>.splash</literal> section with an image (in the Windows
<filename>.BMP</filename> format) to show on screen before invoking the kernel.</para></listitem>
@@ -233,7 +236,7 @@
core kernel, the embedded initrd and kernel command line (see above for a full list).</para>
<para>Also note that the Linux kernel will measure all initrds it receives into TPM PCR 9. This means
- every type of initrd will be measured two or three times: the initrd embedded in the kernel image will be
+ every type of initrd will be measured two or three times: the initrds embedded in the kernel image will be
measured to PCR 4, PCR 9 and PCR 11; the initrd synthesized from credentials (and the one synthesized
from configuration extensions) will be measured to both PCR 9 and PCR 12; the initrd synthesized from
system extensions will be measured to both PCR 4 and PCR 9. Let's summarize the OS resources and the PCRs
@@ -275,6 +278,11 @@
</row>
<row>
+ <entry>Microcode initrd (embedded in unified PE binary)</entry>
+ <entry>4 + 9 + 11</entry>
+ </row>
+
+ <row>
<entry>Default kernel command line (embedded in unified PE binary)</entry>
<entry>4 + 11</entry>
</row>