GRUB menu need to be regenerated after kernel update
Signed-off-by: Maurice Zhou <jasper@apvc.uk>
This commit is contained in:
committed by
George Melikov
parent
bdb85fc137
commit
9261cfb4f5
@@ -109,4 +109,4 @@ Encryption
|
|||||||
can be verified by motherboard firmware to be untempered,
|
can be verified by motherboard firmware to be untempered,
|
||||||
which should be sufficient for most purposes.
|
which should be sufficient for most purposes.
|
||||||
|
|
||||||
Secure Boot is supported out-of-the-box by Fedora.
|
Secure Boot is not supported out-of-the-box due to ZFS module.
|
||||||
|
|||||||
@@ -103,15 +103,19 @@ Install GRUB
|
|||||||
To support Secure Boot, GRUB has been heavily modified by Fedora,
|
To support Secure Boot, GRUB has been heavily modified by Fedora,
|
||||||
namely:
|
namely:
|
||||||
|
|
||||||
- ``grub2-install`` is `disabled for UEFI <https://bugzilla.redhat.com/show_bug.cgi?id=1917213>`__
|
- ``grub2-install`` is `disabled for UEFI <https://bugzilla.redhat.com/show_bug.cgi?id=1917213>`__
|
||||||
- Only a static, signed version of bootloader is copied to EFI system partition
|
- Only a static, signed version of bootloader is copied to EFI system partition
|
||||||
- This signed bootloader does not have built-in support for either ZFS or LUKS containers
|
- This signed bootloader does not have built-in support for either ZFS or LUKS containers
|
||||||
- This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg``
|
- This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg``
|
||||||
|
|
||||||
Unrelated to Secure Boot, GRUB has also been modified to provide optional
|
Unrelated to Secure Boot, GRUB has also been modified to provide optional
|
||||||
support for `systemd bootloader specification (bls) <https://systemd.io/BOOT_LOADER_SPECIFICATION/>`__.
|
support for `systemd bootloader specification (bls) <https://systemd.io/BOOT_LOADER_SPECIFICATION/>`__.
|
||||||
Currently ``blscfg.mod`` is incompatible with root on ZFS.
|
Currently ``blscfg.mod`` is incompatible with root on ZFS.
|
||||||
|
|
||||||
|
As bls is disabled, you will need to regenerate GRUB menu after each kernel upgrade.
|
||||||
|
Or else the new kernel will not be recognized and system will boot the old kernel
|
||||||
|
on reboot.
|
||||||
|
|
||||||
Also see `Fedora docs for GRUB
|
Also see `Fedora docs for GRUB
|
||||||
<https://docs.fedoraproject.org/en-US/fedora/rawhide/system-administrators-guide/kernel-module-driver-configuration/Working_with_the_GRUB_2_Boot_Loader/>`__.
|
<https://docs.fedoraproject.org/en-US/fedora/rawhide/system-administrators-guide/kernel-module-driver-configuration/Working_with_the_GRUB_2_Boot_Loader/>`__.
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
RHEL 8-based distro Root on ZFS
|
RHEL 8-based distro Root on ZFS
|
||||||
=======================================
|
=======================================
|
||||||
`Start here <Root%20on%20ZFS/0-overview.html>`__.
|
`Start here <RHEL%208-based%20distro%20Root%20on%20ZFS/0-overview.html>`__.
|
||||||
|
|
||||||
Contents
|
Contents
|
||||||
--------
|
--------
|
||||||
|
|||||||
@@ -109,4 +109,4 @@ Encryption
|
|||||||
can be verified by motherboard firmware to be untempered,
|
can be verified by motherboard firmware to be untempered,
|
||||||
which should be sufficient for most purposes.
|
which should be sufficient for most purposes.
|
||||||
|
|
||||||
Secure Boot is supported out-of-the-box by RHEL 8-based distro.
|
Secure Boot is not supported out-of-the-box due to ZFS module.
|
||||||
|
|||||||
@@ -114,15 +114,19 @@ Install GRUB
|
|||||||
To support Secure Boot, GRUB has been heavily modified by Fedora,
|
To support Secure Boot, GRUB has been heavily modified by Fedora,
|
||||||
namely:
|
namely:
|
||||||
|
|
||||||
- ``grub2-install`` is `disabled for UEFI <https://bugzilla.redhat.com/show_bug.cgi?id=1917213>`__
|
- ``grub2-install`` is `disabled for UEFI <https://bugzilla.redhat.com/show_bug.cgi?id=1917213>`__
|
||||||
- Only a static, signed version of bootloader is copied to EFI system partition
|
- Only a static, signed version of bootloader is copied to EFI system partition
|
||||||
- This signed bootloader does not have built-in support for either ZFS or LUKS containers
|
- This signed bootloader does not have built-in support for either ZFS or LUKS containers
|
||||||
- This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg``
|
- This signed bootloader only loads configuration from ``/boot/efi/EFI/fedora/grub.cfg``
|
||||||
|
|
||||||
Unrelated to Secure Boot, GRUB has also been modified to provide optional
|
Unrelated to Secure Boot, GRUB has also been modified to provide optional
|
||||||
support for `systemd bootloader specification (bls) <https://systemd.io/BOOT_LOADER_SPECIFICATION/>`__.
|
support for `systemd bootloader specification (bls) <https://systemd.io/BOOT_LOADER_SPECIFICATION/>`__.
|
||||||
Currently ``blscfg.mod`` is incompatible with root on ZFS.
|
Currently ``blscfg.mod`` is incompatible with root on ZFS.
|
||||||
|
|
||||||
|
As bls is disabled, you will need to regenerate GRUB menu after each kernel upgrade.
|
||||||
|
Or else the new kernel will not be recognized and system will boot the old kernel
|
||||||
|
on reboot.
|
||||||
|
|
||||||
Also see `Fedora docs for GRUB
|
Also see `Fedora docs for GRUB
|
||||||
<https://docs.fedoraproject.org/en-US/fedora/rawhide/system-administrators-guide/kernel-module-driver-configuration/Working_with_the_GRUB_2_Boot_Loader/>`__.
|
<https://docs.fedoraproject.org/en-US/fedora/rawhide/system-administrators-guide/kernel-module-driver-configuration/Working_with_the_GRUB_2_Boot_Loader/>`__.
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user