diff --git a/docs/Getting Started/Fedora/Root on ZFS/0-overview.rst b/docs/Getting Started/Fedora/Root on ZFS/0-overview.rst index ce7e790..b66df47 100644 --- a/docs/Getting Started/Fedora/Root on ZFS/0-overview.rst +++ b/docs/Getting Started/Fedora/Root on ZFS/0-overview.rst @@ -109,4 +109,4 @@ Encryption can be verified by motherboard firmware to be untempered, which should be sufficient for most purposes. - Secure Boot is supported out-of-the-box by Fedora. + Secure Boot is not supported out-of-the-box due to ZFS module. diff --git a/docs/Getting Started/Fedora/Root on ZFS/5-bootloader.rst b/docs/Getting Started/Fedora/Root on ZFS/5-bootloader.rst index 2c376fd..c6beb3b 100644 --- a/docs/Getting Started/Fedora/Root on ZFS/5-bootloader.rst +++ b/docs/Getting Started/Fedora/Root on ZFS/5-bootloader.rst @@ -103,15 +103,19 @@ Install GRUB To support Secure Boot, GRUB has been heavily modified by Fedora, namely: - - ``grub2-install`` is `disabled for UEFI `__ - - Only a static, signed version of bootloader is copied to EFI system partition - - This signed bootloader does not have built-in support for either ZFS or LUKS containers - - This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg`` + - ``grub2-install`` is `disabled for UEFI `__ + - Only a static, signed version of bootloader is copied to EFI system partition + - This signed bootloader does not have built-in support for either ZFS or LUKS containers + - This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg`` Unrelated to Secure Boot, GRUB has also been modified to provide optional support for `systemd bootloader specification (bls) `__. Currently ``blscfg.mod`` is incompatible with root on ZFS. + As bls is disabled, you will need to regenerate GRUB menu after each kernel upgrade. + Or else the new kernel will not be recognized and system will boot the old kernel + on reboot. + Also see `Fedora docs for GRUB `__. diff --git a/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS.rst b/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS.rst index 5b9074b..af78590 100644 --- a/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS.rst +++ b/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS.rst @@ -1,6 +1,6 @@ RHEL 8-based distro Root on ZFS ======================================= -`Start here `__. +`Start here `__. Contents -------- diff --git a/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/0-overview.rst b/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/0-overview.rst index bdc04f7..b660ab7 100644 --- a/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/0-overview.rst +++ b/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/0-overview.rst @@ -109,4 +109,4 @@ Encryption can be verified by motherboard firmware to be untempered, which should be sufficient for most purposes. - Secure Boot is supported out-of-the-box by RHEL 8-based distro. + Secure Boot is not supported out-of-the-box due to ZFS module. diff --git a/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/5-bootloader.rst b/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/5-bootloader.rst index f55ae00..9a392bb 100644 --- a/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/5-bootloader.rst +++ b/docs/Getting Started/RHEL-based distro/RHEL 8-based distro Root on ZFS/5-bootloader.rst @@ -114,15 +114,19 @@ Install GRUB To support Secure Boot, GRUB has been heavily modified by Fedora, namely: - - ``grub2-install`` is `disabled for UEFI `__ - - Only a static, signed version of bootloader is copied to EFI system partition - - This signed bootloader does not have built-in support for either ZFS or LUKS containers - - This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg`` + - ``grub2-install`` is `disabled for UEFI `__ + - Only a static, signed version of bootloader is copied to EFI system partition + - This signed bootloader does not have built-in support for either ZFS or LUKS containers + - This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg`` Unrelated to Secure Boot, GRUB has also been modified to provide optional support for `systemd bootloader specification (bls) `__. Currently ``blscfg.mod`` is incompatible with root on ZFS. + As bls is disabled, you will need to regenerate GRUB menu after each kernel upgrade. + Or else the new kernel will not be recognized and system will boot the old kernel + on reboot. + Also see `Fedora docs for GRUB `__.