Post #3116346
2026-05-26 04:15 UTC
…rigid in nature: only one allowed kernel command line. We eventually added the concept of "profiles" to UKIs, so tha a single UKI could synthesize multiple boot menu entries, which enables you to chose one of many pre-prepared kernel command lines.
Which is much more powerful, but still a bit rigid: we needed ways to securely insert local parameterization into such a system (i.e. some signature keys or so, machine identity, …) so we added the concept of "side cars" to the thing, that…
Replies (1)
-
@pid_eins@mastodon.social 2026-05-26 04:18
…allow "enriching" a UKI via system credentials, sysext DDIs, confext DDIs or EFI addons. But this so far left one question unanswered: how do I generate a new menu entry from a sidecar + UKI combination of my choice? after all, the reason we even support multiple menu entries is to support multiple versions of the kernel, so that one can always fall back. But this kind of fall back logic should also apply to the sidecars, because they have a chance to fail as much as the kernel itself has.