From 984e008127985172bdfe90262d5dc705cc5149a1 Mon Sep 17 00:00:00 2001 From: Eduard Shishkin Date: Mon, 23 Mar 2026 16:31:50 +0100 Subject: [PATCH] zipl/src: Indicate in a verbose output if a component is signed MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Regardless of secure boot support, indicate in the verbose zipl(8) output if a component is signed. Signed-off-by: Eduard Shishkin Reviewed-by: Jan Höppner Signed-off-by: Jan Höppner --- zipl/src/bootmap.c | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/zipl/src/bootmap.c b/zipl/src/bootmap.c index 14a30c34..6a72d28c 100644 --- a/zipl/src/bootmap.c +++ b/zipl/src/bootmap.c @@ -704,9 +704,6 @@ static int add_ipl_program(struct install_set *bis, bool add_envblk, /* initiate values for ramdisk */ stats.st_size = 0; if (ipl->common.ramdisk != NULL) { - /* Add ramdisk */ - if (verbose && bis->mirrors[mirror_id].print_details) - printf(" initial ramdisk...: %s\n", ipl->common.ramdisk); /* Get ramdisk file size */ if (stat(ipl->common.ramdisk, &stats)) { error_reason(strerror(errno)); @@ -834,10 +831,10 @@ static int add_ipl_program(struct install_set *bis, bool add_envblk, offset += sizeof(struct component_entry); /* Add kernel image */ - if (verbose && bis->mirrors[mirror_id].print_details) - printf(" kernel image......: %s\n", ipl->common.image); - signature_size = extract_signature(ipl->common.image, &signature, &sig_head); + if (verbose && bis->mirrors[mirror_id].print_details) + printf(" kernel image......: %s%s\n", + ipl->common.image, signature_size ? " (signed)" : ""); if (signature_size && (is_secure == SECURE_BOOT_ENABLED || (is_secure == SECURE_BOOT_AUTO && secure_boot_supported))) { @@ -906,6 +903,10 @@ static int add_ipl_program(struct install_set *bis, bool add_envblk, if (ipl->common.ramdisk != NULL) { signature_size = extract_signature(ipl->common.ramdisk, &signature, &sig_head); + if (verbose && bis->mirrors[mirror_id].print_details) + printf(" initial ramdisk...: %s%s\n", + ipl->common.ramdisk, + signature_size ? " (signed)" : ""); if (signature_size && (is_secure == SECURE_BOOT_ENABLED || (is_secure == SECURE_BOOT_AUTO &&