From cc316ea337dabfefdd54985cd82c82ad50772ce5 Mon Sep 17 00:00:00 2001 From: Daniel Axtens Date: Wed, 28 Oct 2020 12:57:19 +1100 Subject: [PATCH] docs: grub-install --pubkey has been supported for some time grub-install --pubkey is supported, so we can now document it. Signed-off-by: Daniel Axtens Reviewed-by: Daniel Kiper --- docs/grub.texi | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/docs/grub.texi b/docs/grub.texi index 94ac2eac9..1c57260f9 100644 --- a/docs/grub.texi +++ b/docs/grub.texi @@ -5820,15 +5820,9 @@ verified with a public key currently trusted by GRUB validation fails, then file @file{foo} cannot be opened. This failure may halt or otherwise impact the boot process. -@comment Unfortunately --pubkey is not yet supported by grub-install, -@comment but we should not bring up internal detail grub-mkimage here -@comment in the user guide (as opposed to developer's manual). - -@comment An initial trusted public key can be embedded within the GRUB -@comment @file{core.img} using the @code{--pubkey} option to -@comment @command{grub-mkimage} (@pxref{Invoking grub-install}). Presently it -@comment is necessary to write a custom wrapper around @command{grub-mkimage} -@comment using the @code{--grub-mkimage} flag to @command{grub-install}. +An initial trusted public key can be embedded within the GRUB @file{core.img} +using the @code{--pubkey} option to @command{grub-install} +(@pxref{Invoking grub-install}). GRUB uses GPG-style detached signatures (meaning that a file @file{foo.sig} will be produced when file @file{foo} is signed), and