Hey, Yes that is possible, although the current format was "natural" for our setup due to the signing service generating the signature with the correct magic (to be appended to files).
Then afterwards a signed image builder script just concatenated the signature to the image and padded it to the signature block size. I can update that script to pull apart the signature and magic string and put the padding in the middle. As for the code, the signature is firstly generated by the LP signing service which is run by the Launchpad team. https://documentation.ubuntu.com/launchpad/en/latest/reference/services/signing/ The script that does the concatenation mentioned above is part of the grub2-signed source package which is provided in the previously discussed PPA (you can use apt source for example to acquire it). Mate -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2064319 Title: Power guest secure boot with key management: GRUB2 portion To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-power-systems/+bug/2064319/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
