<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 30.4.2022 05:08, Andrei Borzenkov
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:829a0c23-e214-950f-10ea-c801dc4b2f98@gmail.com">
<pre class="moz-quote-pre" wrap="">On 28.04.2022 10:54, Lennart Poettering wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">* systemd-boot is an additional bootloader, rather than replacing
an existing one, thus increasing the attack surface.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Hmm, what? "additional bootloader"? Are they suggesting you use grub
to start sd-boot? I mean, you certainly could do that, but the only
people I know who do that do that to patch around the gatekeeping that
the shim people are doing. Technically the boot chain should either be
[firmware → sd-boot → kernel] or [firmware → shim → sd-boot → kernel]
(if you buy into the shim thing), and nothing else.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
I guess "additional bootloader" in this context means that distribution
cannot use sd-boot as the only bootloader for obvious reason - it is EFI
only. So distribution would need to keep currently used bootloader
anyway. </pre>
</blockquote>
<p><br>
</p>
<p>Distributions most certainly can become efi only if they chose to
do so, there nothing technical that stands in that way.</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:829a0c23-e214-950f-10ea-c801dc4b2f98@gmail.com">
<pre class="moz-quote-pre" wrap="">If current bootloader already works on platforms supported by
distribution, what is gained by adding yet another one?
</pre>
</blockquote>
<p><span>Freedom of <b>choice</b></span></p>
<p>If the distribution allows users the freedom to choose from a set
of components that the OS "made of" or runs, to fit the user use
cases or has targeted use cases ( which bootloaders such as
syslinux, u-boot, redboot etc. are aimed at ) then drawing the
line at bootloaders <span>makes no sense.<b><br>
</b></span></p>
<p><span>If the distribution does not allow users the freedom to
choose, then it makes no sense to support multiple variants of
components that provide same/similar function in the
distribution.<b><br>
</b></span></p>
<p><br>
</p>
<p>JBG<br>
</p>
</body>
</html>