[systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-23 Thread Dominik George
Hi, for some time now, I have been investigating how to best make a desktop system talk to a web API (HTTP, REST) for user management, so NSS and PAM make HTTP requests to an API to verify authentication (using OIDC) and to retrieve NIS information (using REST endpoints). One of the approaches I

Re: [systemd-devel] Prevent firmware from falling back to next EFI boot option on secure boot failure?

2022-11-23 Thread Lennart Poettering
On Mi, 23.11.22 17:56, Lennart Poettering ([email protected]) wrote: > > If this is a bug, I'd be willing to attempt a pull request submission > > if a suggested fix is given. Overall we like the functionality > > sd-boot provides and the integration with systemd, but this is likely > > a ha

Re: [systemd-devel] Prevent firmware from falling back to next EFI boot option on secure boot failure?

2022-11-23 Thread Lennart Poettering
On Mi, 23.11.22 11:44, Daniel Harms ([email protected]) wrote: > Lennart, > > That is how we're hoping it should work, so it's good to hear. I > suppose I'm not sure that it's the firmware driving this process--I > just assumed because I know that the UEFI spec has verbiage requiring > EFI boot m

Re: [systemd-devel] Prevent firmware from falling back to next EFI boot option on secure boot failure?

2022-11-23 Thread Daniel Harms
Lennart, That is how we're hoping it should work, so it's good to hear. I suppose I'm not sure that it's the firmware driving this process--I just assumed because I know that the UEFI spec has verbiage requiring EFI boot managers to try next options in case of certain failure cases. I think you'

Re: [systemd-devel] Prevent firmware from falling back to next EFI boot option on secure boot failure?

2022-11-23 Thread Lennart Poettering
On Mi, 23.11.22 10:22, Daniel Harms ([email protected]) wrote: > Hello, > > We are doing some experiments with booting self-signed Unified Kernel > Images (UKIs) using systemd-boot. Our eventual use-case is edge/IoT > devices, so no interactive user will be present for most OS upgrade > flows. >

[systemd-devel] Prevent firmware from falling back to next EFI boot option on secure boot failure?

2022-11-23 Thread Daniel Harms
Hello, We are doing some experiments with booting self-signed Unified Kernel Images (UKIs) using systemd-boot. Our eventual use-case is edge/IoT devices, so no interactive user will be present for most OS upgrade flows. In doing some testing on the boot option fallback features (in a vmware vm)