Hello, On 06/12/2023 at 22:09, Steve McIntyre wrote:
On Wed, Dec 06, 2023 at 06:01:17PM +0100, Bastian Blank wrote:I would like do stop signing i386 kernels. - IA32 UEFI is basically non existent outside of the Apple world and maybe some embedded stuff.
(...)
there's no point in signing i386 grub and fwupd or having a signed shim if we don't have a signed kernel.
Over the years I have seen a number of netbook or tablet-style PCs with 32-bit UEFI firmware and a 64-bit capable CPU, so they could boot with grub-efi-ia32 and an amd64 kernel. I do not remember if they supported secure boot though.