I am not making a security argument. I am making the argument that I do not want to include a patch that upstream considers completely unworkable.
-- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/2100783 Title: systemd-boot does not support an externally provided initrd on UKI Status in systemd package in Ubuntu: Won't Fix Bug description: We would like to boot arm and riscv using systemd-ukify, but the EFI stub in systemd-boot that is used by systemd-ukify to make the UKI only supports embedded initrd's. We would like to be able to externally provide the initrd. This is important for secure boot, as this way on kernel updates the UKI can be signed and provided as a package while the initrd can be generated by update-initramfs locally, as there are still many things changing initramfs-hooks locally. The patch was rejected upstream: https://github.com/systemd/systemd/pull/35978 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2100783/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp