aboutsummaryrefslogtreecommitdiff
path: root/CHANGELOG.rst
Commit message (Collapse)AuthorAgeFilesLines
* mkarchiso: preload more GRUB modules and disable shim_lock verifiernl67202022-08-191-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --disable-shim-lock is required to support Secure Boot with custom signatures without using shim. Otherwise GRUB will trow an error when trying to boot a kernel: error: shim_lock protocol not found. error: you need to load the kernel first. The modules GRUB will use need to be preloaded otherwise the EFI binaries cannot be signed and used for Secure Boot. See https://bugs.archlinux.org/task/71382. GRUB will trow en error: error: verification requested but nobody cares These changes are done to support Secure Boot using custom keys (not shim) by simply extracting the boot loader (BOOTx64.EFI and BOOTIA32.EFI), kernel, UEFI shell, signing them and then repacking the ISO. For example. Extract the files: $ osirrox -indev archlinux-YYYY.MM.DD-x86_64.iso \ -extract_boot_images ./ \ -extract /EFI/BOOT/BOOTx64.EFI BOOTx64.EFI \ -extract /EFI/BOOT/BOOTIA32.EFI BOOTIA32.EFI \ -extract /shellx64.efi shellx64.efi \ -extract /shellia32.efi shellia32.efi \ -extract /arch/boot/x86_64/vmlinuz-linux vmlinuz-linux Make the files writable: $ chmod +w BOOTx64.EFI BOOTIA32.EFI shellx64.efi shellia32.efi vmlinuz-linux Sign the files: $ sbsign --key db.key --cert db.crt --output BOOTx64.EFI BOOTx64.EFI $ sbsign --key db.key --cert db.crt --output BOOTIA32.EFI BOOTIA32.EFI $ sbsign --key db.key --cert db.crt --output shellx64.efi shellx64.efi $ sbsign --key db.key --cert db.crt --output shellia32.efi shellia32.efi $ sbsign --key db.key --cert db.crt --output vmlinuz-linux vmlinuz-linux Copy the boot loader and UEFI shell to the EFI system partition image: $ mcopy -D oO -i eltorito_img2_uefi.img BOOTx64.EFI BOOTIA32.EFI ::/EFI/BOOT/ $ mcopy -D oO -i eltorito_img2_uefi.img shellx64.efi shellia32.efi ::/ Repack the ISO using the modified El Torito UEFI boot image and add the signed boot loader files, UEFI shell and kernel to ISO9660: $ xorriso -indev archlinux-YYYY.MM.DD-x86_64.iso \ -outdev archlinux-YYYY.MM.DD-x86_64-Secure_Boot.iso \ -boot_image any replay \ -append_partition 2 0xef eltorito_img2_uefi.img \ -map BOOTx64.EFI /EFI/BOOT/BOOTx64.EFI \ -map BOOTIA32.EFI /EFI/BOOT/BOOTIA32.EFI \ -map shellx64.efi /shellx64.efi \ -map shellia32.efi /shellia32.efi \ -map vmlinuz-linux /arch/boot/x86_64/vmlinuz-linux Boot the resulting archlinux-YYYY.MM.DD-x86_64-Secure_Boot.iso.
* mkarchiso: copy all GRUB files to the ISOnl67202022-08-171-0/+1
| | | | | | | | | | | | | | | | Do not limit file copying to only grub.cfg and instead copy all GRUB configuration files and assets to both the ISO9660 and FAT image. This will allow for including custom images, fonts, etc. To easily match all non-configuration files (i.e. files without the .cfg extension), bash's extended glob feature will be enabled. Actions common to multiple _make_bootmode_uefi-*.grub are split off into dedicated functions: * _make_common_bootmode_grub_copy_to_efibootimg, * _make_common_bootmode_grub_copy_to_isofs, * _make_common_bootmode_grub_cfg. Use the same du command in all efiboot_imgsize variable assignments. Fixes #185.
* Add efibootimg variable in place of full pathPellegrino Prevete2022-07-161-0/+2
| | | | | | Update authors Update CHANGELOG
* Add changelog for 65nl67202022-06-301-0/+12
|
* configs/baseline/profiledef.sh: add `-E ztailpacking` to ↵nl67202022-06-181-0/+1
| | | | | | airootfs_image_tool_options for mkfs.erofs As the man page says, it saves more space, although the feature is experimental.
* Update documentation for uefi x64 grub boot modesplainlinen2022-06-101-0/+1
|
* mkarchiso: use C.UTF-8nl67202022-06-091-0/+2
| | | | | | The glibc 2.35-6 package ships with the C.UTF-8 locale included, so mkarchiso does not need to use a non-UTF-8 locale anymore. Implements #175.
* configs/: use the C.UTF-8 localenl67202022-06-091-0/+7
| | | | | | | The glibc 2.35-6 package ships with the C.UTF-8 locale included. This means there is now a UTF-8 locale available by default and en_US.UTF-8, which requires editing /etc/locale.gen and running locale-gen, is not needed anymore. Implements #175.
* Fix release date for v64 in CHANGELOG.rstnl67202022-05-301-1/+1
|
* Add changelog for 64nl67202022-05-281-2/+15
|
* Update CHANGELOG.Pellegrino Prevete2022-05-251-0/+3
|
* Add changelog for 63nl67202022-04-301-2/+12
|
* configs/*: add VMware and Hyper-V guest packages and enable their servicesnl67202022-04-301-0/+2
| | | | | | | * open-vm-tools package, vmtoolsd.service and vmware-vmblock-fuse.service for VMware. * hyperv package, hv_fcopy_daemon.service, hv_kvp_daemon.service and hv_vss_daemon.service for Hyper-V. Related to #118.
* configs/releng/airootfs/etc/xdg/reflector/reflector.conf: use mirrors that ↵nl67202022-04-281-0/+1
| | | | | | support both IPv4 & IPv6 This ensures that IPv6-only systems get working mirrors.
* configs/releng/packages.x86_64: add open-iscsinl67202022-04-281-0/+1
| | | | It is needed for installing Arch on an iSCSI target.
* configs/releng/packages.x86_64: add dmidecodenl67202022-04-071-0/+2
| | | | It is useful for finding information about the system's hardware and firmware.
* configs/releng/airootfs/etc/systemd/system/etc-pacman.d-gnupg.mount: use ramfsnl67202022-04-061-0/+2
| | | | | When using tmpfs, it is possible that parts of it end up getting put in swap space (only if there is one). This may not be desired, so use ramfs instead.
* Add changelog for 62.1David Runge2022-04-051-0/+8
| | | | | CHANGELOG.rst: Add changelog for 62.1
* CHANGELOG.rst: version 62nl67202022-03-311-3/+9
|
* configs/{baseline,releng}/: disable systemd-gpt-auto-generatornl67202022-03-251-0/+2
| | | | | | | | | | | | | | | When booting the ISO, you can observe a message that systemd-gpt-auto-generator has failed: systemd-gpt-auto-generator[197]: Reading EFI variable /sys/firmware/efi/efivars/LoaderDevicePartUUID-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f. systemd-gpt-auto-generator[197]: open("/sys/firmware/efi/efivars/LoaderDevicePartUUID-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f") failed: No such file or directory systemd-gpt-auto-generator[197]: EFI loader partition unknown, exiting. systemd-gpt-auto-generator[197]: (The boot loader did not set EFI variable LoaderDevicePartUUID.) systemd-gpt-auto-generator[197]: Failed to open device: No such device Seeing as it started to appear relatively recently, it may be a systemd bug. Since we do not want any GPT partition automounting in the live environment anyway, systemd-gpt-auto-generator can simply be disabled. Fixes #164.
* syslinux PXE: Forced all TFTP paths to be absoluteEric Toombs2022-03-251-0/+3
| | | | By default, syslinux interprets TFTP paths as relative to the location of the *.c32 modules, regardless whether a path starts with a slash. Without the `::` that I added to all of these paths, syslinux cannot find these files. It searches for them in /%INSTALL_DIR%/syslinux//%INSTALL_DIR%/boot/x86_64/vmlinuz-linux, etc.
* Add changelog for 61David Runge2022-01-311-0/+21
| | | | | CHANGELOG.rst: Add changelog entry for 61.
* Add changelog for version 60David Runge2021-12-281-0/+19
| | | | | CHANGELOG.rst: Add a changelog entry for version 60.
* Add dummy changelog entryDavid Runge2021-12-281-0/+12
| | | | | CHANGELOG.rst: Add a dummy changelog entry that serves as entry for any unreleased changes.
* Add changelog for v59David Runge2021-11-301-0/+21
| | | | | CHANGELOG.rst: Add changelog information for v59.
* Add changelog for v58David Runge2021-08-251-0/+25
| | | | | CHANGELOG.rst: Add changelog entries for v58.
* Add changelog for 57David Runge2021-07-301-0/+20
| | | | | CHANGELOG.rst: Add an entry for v57.
* Add changelog for 56.1David Runge2021-07-111-0/+14
| | | | | CHANGELOG.rst: Add a changelog entry for 56.1
* Add changelog for v56David Runge2021-06-301-0/+19
| | | | | CHANGELOG.rst: Add a changelog entry for v56.
* Add changelog for v55David Runge2021-05-301-0/+15
| | | | | CHANGELOG.rst: Add changelog entries for v55.
* Add changelog for v54David Runge2021-05-131-0/+29
| | | | | CHANGELOG.rst: Add changelog entry for v54.
* Add changelog for v53David Runge2021-05-011-0/+20
| | | | | CHANGELOG.rst: Add changelog for v53
* Add changelog entry for v52David Runge2021-03-301-0/+24
| | | | | CHANGELOG.rst: Add changelog entry for v52
* Add changelog fileDavid Runge2021-02-011-0/+31
CHANGELOG.rst: Add file to track changes (at least for v51).
generated by cgit v1.2.3-70-g09d2 (git 2.51.0) at 2025-12-29 20:35:04 +0000