-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-10.0
-
None
-
No
-
None
-
1
-
rhel-bootloader
-
3
-
False
-
False
-
-
None
-
Bootloader Sprint 2025.4
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
-
x86_64
-
None
What were you trying to do that didn't work?
Boot a system with a Secure Boot signed UKI image, using https://wiki.archlinux.org/title/GRUB#Chainloading_a_unified_kernel_image in the GRUB config:
menuentry "UKI" {
insmod fat
insmod chain
search --no-floppy --set=root --fs-uuid FILESYSTEM_UUID
chainloader /EFI/Linux/uki.efi
}
What is the impact of this issue to you?
We can not boot signed UKI images from GRUB.
Please provide the package NVR for which the bug is seen:
I have not tried on RHEL 10.0 again but the last time I tried was in Fedora 41 or 42.
How reproducible is this bug?:
Always.
Steps to reproduce
- Setup a system with a GRUB config poiting to a signed UKI image
- Try to boot it
Expected results
System boots
Actual results
Backtrace (to be added soon)
- is related to
-
COS-2073 Confidential Computing: composefs-rs integration in bootc
-
- In Progress
-