kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zipl: add secure boot man page updates

Browse Source 
Add zipl and zipl.conf man page updates.

The zipl man page will look like:

       -S <SWITCH> or --secure <SWITCH>
               Control the zIPL secure boot support.  <SWITCH> can take one of three values:

                 auto (default)
                   Write signatures if available and supported by the system.
                 1
                   Signatures are written independent of support indicated by the local
                   system. Also missing signatures for stage 3 and kernel IPL files
                   will result in an error.
                 0
                   No signatures will be written.

The zipl.conf man page will look like:

       secure = auto/1/0 (configuration only)

              Configuration section:
              Control the zIPL secure boot support.  Set this option to one of the following:

                -  auto: Write signatures if available and supported by the system.

                -  1: Signatures are written independent of support indicated by the local system.
		   Also missing signatures for stage 3 and kernel IPL files will result in an error.

                -  0: No signatures will be written.

                   The default value for 'secure' is auto.

Signed-off-by: Stefan Haberland <sth@linux.ibm.com>
Acked-by: Peter Oberparleiter <oberpar@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Stefan Haberland
2019-04-26 15:16:28 +02:00
committed by Jan Höppner
parent 331b54d573
commit 6ea645b345
2 changed files with 42 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
zipl/man/zipl.8
View File

@@ -352,6 +352,21 @@ whether they contain a dump signature or not.
This option can only be used together with
.BR \-\-mvdump .
.TP
.BR "\-S <SWITCH>" " or " "\-\-secure <SWITCH>"
Control the zIPL secure boot support.
<SWITCH> can take one of three values:
auto (default)
Write signatures if available and supported by the system.
1
Signatures are written independent of support indicated by the local
system. Also missing signatures for stage 3 and kernel IPL files
will result in an error.
0
No signatures will be written.
.SH EXAMPLE
1. Scenario: prepare disk for booting a Linux kernel image using the
following parameters:

27
zipl/man/zipl.conf.5
View File

@@ -82,6 +82,8 @@ below).
.br
defaultmenu = menu1
.br
secure = auto
.br
[linux]
.br
@@ -517,6 +519,31 @@ An optional hexadecimal address may be provided to load the kernel to a
non-default memory location.
.PP
.B secure
=
.IR auto / 1 / 0
(configuration only)
.IP
.B Configuration section:
.br
Control the zIPL secure boot support.
Set this option to one of the following:
.IP " - " 12
.BR auto:
Write signatures if available and supported by the system.
.IP " - " 12
.BR 1:
Signatures are written independent of support indicated by the local system.
Also missing signatures for stage 3 and kernel IPL files will result in an error.
.IP " - " 12
.BR 0:
No signatures will be written.
The default value for
.B 'secure'
is auto.
.PP
.B segment
=
.IR segment\-file , address