mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-08-04 03:47:26 +00:00
BUILDING: fix missing DISABLE_EBS_PROTECTION section
Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
parent
9a960c6e32
commit
0a1bf93d4a
9
BUILDING
9
BUILDING
@ -33,6 +33,15 @@ Variables you could set to customize the build:
|
|||||||
install targets
|
install targets
|
||||||
- ENABLE_HTTPBOOT
|
- ENABLE_HTTPBOOT
|
||||||
build support for http booting
|
build support for http booting
|
||||||
|
- DISABLE_EBS_PROTECTION
|
||||||
|
On systems where a second stage bootloader is not used, and the Linux
|
||||||
|
Kernel is embedded in the same EFI image as shim and booted directly
|
||||||
|
from shim, shim's ExitBootServices() hook can cause problems as the
|
||||||
|
kernel never calls the shim's verification protocol. In this case
|
||||||
|
calling the shim verification protocol is unnecessary and redundant as
|
||||||
|
shim has already verified the kernel when shim loaded the kernel as the
|
||||||
|
second stage loader. In such a case, and only in this case, you should
|
||||||
|
use DISABLE_EBS_PROTECTION=y to build.
|
||||||
- REQUIRE_TPM
|
- REQUIRE_TPM
|
||||||
if tpm logging or extends return an error code, treat that as a fatal error.
|
if tpm logging or extends return an error code, treat that as a fatal error.
|
||||||
- ARCH
|
- ARCH
|
||||||
|
Loading…
Reference in New Issue
Block a user