Hacker News new | ask | show | jobs
by gizmo686 1672 days ago
Another approach is systemd-stub. This is a small bit of efi code that looks for the kernel and ramdisk within the efi executable itself.

An added benifit of this approach is that you can have a full linux system in a single file. In addition to being more convenient in many scenerios, this also means that your initrd and kernel commandline can be signed under secureboot.

If you are using dracut to create your ramdisk, it has an option to automatically package it into an EFI executable. Given the design of Dracut, you probably wouldn't use it to put the entire system into the EFI executable, as Dracut assumes its job is to load the real rootfs.

https://www.freedesktop.org/software/systemd/man/systemd-stu...

https://man7.org/linux/man-pages/man8/dracut.8.html

1 comments

Not so useful for an embedded system.