From:
http://kernelnewbies.org/Linux_3.17#head-021e2397db399ec42f5af49df263627bed81a6d5
Feature of kernel-3.17
Signed kexec kernels
Kexec is a Linux feature that allows to boot a Linux kernel from an existing Linux kernel. It is used for faster rebooting or even for automatically booting a new kernel after a crash. However, UEFI "secure boot" systems are not supposed to allow to boot unsigned operating systems. Kexec allows to bypass the UEFI secure boot by kexec'ing into a unsigned kernel. To solve this problem, this release incorporates support for only allowing to kexec kernels that are signed.
Anyone know how to use this feature? Is it automatic?
Why do I ask?
On Fri, Oct 17, 2014 at 06:40:07AM +0000, Atri Bhattacharya wrote:
Hi!
I installed kernel-desktop (3.17.0) from Kernel:Stable on my UEFI laptop
using openSUSE 13.2 RC, but am unable to boot into it because it
complains of an invalid signature at boot* and drops me back to the grub
screen. Is there a way to be able to boot into kernels installed from
Kernel:Stable on UEFI systems?
Thanks for any help. Best wishes.
* Something along the lines of "/boot/vmzlinux-3.17.0-1.1.gc467423 has
invalid signature"
>Disable UEFI Secure Boot in your BIOS for installing development kernels.
Alas, I do not have the option to turn off Secure Boot in the BIOS of my HP 17T
One more Question:
If I strip the cert from 13.2’s kernel-3.16 will it work in kernel-3.17?
Thanks for your help on this matter:)