Puppy Linux Discussion Forum

gyrog

@Jasper,
You are welcome.

gyrog

How is this different from "save66sfs"?

Each save is a complete save, so a single ".sfs" file contains all the save data files at the time of the shutdown.
There is no consolidation of multiple ".sfs" files, either during 'init' or via a utility.
----------------
I have uploaded 'local-initrd.gz ...

gyrog

I have uploaded 'S15Pup64-22.12-241006.signed.zip' and a new 'iso2zip.gz' to https://www.mediafire.com/folder/eto6n8qqstpzx/ziprelease .

'S15Pup64-22.12-241006.signed.zip' is my second "signed" ziprelease.

But this is the first generated with the new 'iso2zip' utility.
(gunzip iso2zip.gz, to ...

gyrog

I have attached 'mergelayers-04.tar'.

Now works with just a single input file, i.e. it can be used to recreate an sfs with different compression.
mergelayers -lzo puppy...sfs puppy-lzo.sfs

The "Usage" info you get from running 'mergelayers' without any parameters,
now documents a long-standing ...

gyrog

@wiak and @dimkr,
I have replied here, viewtopic.php?p=132410#p132410

This is getting rather off-topic.

gyrog

In the NobelPup64 topic, posts:
https://forum.puppylinux.com/viewtopic.php?p=132385#p132385
and
https://forum.puppylinux.com/viewtopic.php?p=132394#p132394

The possible future of current MOK, has been questioned.
All I can say is that I'm working with the cards I've been dealt, now.
I consider ...

gyrog

A kernel signed with a MOK won't work,

I've done it with a number of different Puppies.

AFAIK there's no automated mechanism to enroll a MOK that doesn't require user intervention (and root privileges or the UEFI password). Such a mechanism would defeat the security advantage of having Secure ...

gyrog

FrugalPup v44 is available.

FrugalPup v44, DiskPup v44, StickPup v44 and f2StickPup v44 - Puppy frugal installer.
Along with e3StickPup v44 and e4StickPup v44.

'frugalpup_44.sfs'(3.1 MiB) or 'frugalpup-44.pet'(3.1 MiB) or 'FrugalPup_AppDir-44.tar.gz'(3.1 MiB) can be downloaded from https://www ...

gyrog

Unfortunately "borrowing" a signed 'grub...efi' file doesn't help us.

If "Secure Boot" is not enabled, then it doesn't matter.

If "Secure Boot" is enabled then the Puppy boot will fail when it tries to load the kernel, i.e. on selecting a grub menu entry.
With no option available to enroll the ...

gyrog

Built to test new FrugalPup-43
Sorry, unfortunately not a complete test.

Yes, 'mk_iso.sh' worked fine, but this Puppy does not contain the grub2.06 binaries from FrugalPup.
This Puppy contains 'usr/lib/grub/x86_64-efi-signed/gcdx64.efi.signed' et al..., in it's 'devx' so the 'mk_iso.sh' script ...

gyrog

This may be useless to you, but it's what I use to boot 64 & 32 bit puppies.
Zip contains efi bootloader, layout png & sample grub.cfg. Use at own risk.

https://www.mediafire.com/file/vvr3w2asi0wsgit/grub6432.zip/file

Issue 1, the grubx64.efi is signed by a MOK whose private key I have no ...

gyrog

I saw grub efi files on that folder. Is it signed already and also able to search for grub.cfg file?
The grub efi files are not signed.
I am not aware of any facility to search for a grub.cfg file.
But I tend to litter the sub-directories of the ESP with grub.cfg files like this:

# The real ...

gyrog

@thinkpadfreak,
Thanks for doing the translation.
And you are welcome.

gyrog

Where are we at with "Secure Boot" support?

We have working scripts to:

Sign binaries, 'grub....efi' or 'vmlinuz'.
Sign the kernel module files in a directory or a ".sfs" file.
Generate, store, and enroll a MOK.

Basically, we can do it.

The question is how we want to manage MOK's?

Options:

1 ...

gyrog

@ozsouth,
Thanks for the suggestion.

Could you please tell me what version of grub2 it is, and where it comes from?

Interesting layout.
In my testing, I have found no evidence of a need to store the vmlinuz and initrd.gz files in the ESP, or even on the same device.

gyrog

FrugalPup v43 is available.

FrugalPup v43, DiskPup v43, StickPup v43 and f2StickPup v43 - Puppy frugal installer.
Along with e3StickPup v43 and e4StickPup v43.

'frugalpup_43.sfs'(3.1 MiB) or 'frugalpup-43.pet'(3.1 MiB) or 'FrugalPup_AppDir-43.tar.gz'(3.1 MiB) can be downloaded from https://www ...

gyrog

I have uploaded 'signKernelUtils-04.tar.gz' to https://www.mediafire.com/folder/dtvy7d42uot5q/boot .
Simply extract the tar file into a directory beside your other AppDir's.
Then open this directory and run the 'setup' script.

The error message reporting has been significantly improved.
All the ...

gyrog

@rockedge, and @geo_c,
Hope it works for you.
If it does, you are welcome.

gyrog

I have a possible FrugalPup v43 ready to go once this is sorted.

gyrog

I have attached 'mergelayers-03.tar'.

This new version provides extended support for "fiddlers".

The '-zstd' optional parmmeter has now be enhanced with an optional trailing compression level.
If '-zstd19' is specified, mksquashfs is called using '-comp zstd -Xcompression-level 19'.

An '-lzo ...

gyrog

The code for signed grub, omitted to copy the ".cer" file.
The patched FrugalPup code:

type signBinary >/dev/null 2>&1
if [ $? -eq 0 ]; then
for oneGrub in grubia32.efi grubx64.efi; do
[ -e "$BIN_DEST/$oneGrub" ] && signBinary "$BIN_DEST/$oneGrub" >/dev/null 2>&1
[ -e "${BIN_DEST}/${oneGrub ...

gyrog

There's a bug in v42, so there will be a FrugalPup v43.

When FrugalPup is installing grub2 in a "signed" environment, it fails to copy the '/MOK/local.cer' file to the root of the "boot" partition.
This is annoying when you run any of the StickPup's, and then try to boot the USB stick in a "Secure ...

gyrog

Please use the 'grub2-efi-bin.tar.xz' file as your source for grub2 binaries,
viewtopic.php?p=131997#p131997.

Or extract the same file from the FrugalPup v42 release, viewtopic.php?p=132128#p132128.

gyrog

Example code:

There is now a FrugalPup that implements this stuff, https://forum.puppylinux.com/viewtopic.php?p=132128#p132128

The following code will only "sign" things if the 'signKernelUtils' have been extracted and 'setup' executed.
And if a MOK partition, containing a private local MOK, is ...

gyrog

FrugalPup v42 is available.

FrugalPup v42, DiskPup v42, StickPup v42 and f2StickPup v42 - Puppy frugal installer.
Along with e3StickPup v42 and e4StickPup v42.

'frugalpup_42.sfs'(3.1 MiB) or 'frugalpup-42.pet'(3.1 MiB) or 'FrugalPup_AppDir-42.tar.gz'(3.1 MiB) can be downloaded from https://www ...

gyrog

If you are looking for the 'sign-file' utility, it's usually in the 'kbuild...sfs'.
If your Puppy doesn't have a 'kbuild...sfs', then look in your 'kernel_sources' as '/usr/src/linux/scripts/sign-file'.

gyrog

I have uploaded 'signKernelUtils-03.tar.gz' to https://www.mediafire.com/folder/dtvy7d42uot5q/boot .
Simply extract the tar file into a directory beside your other AppDir's.
Then open this directory and run the 'setup' script.

Most significant change is a 'help.html' file is included with a brief ...

gyrog

wiak , thanks for the clarification.
And I agree that a MOK solution such as this is unlikely to be attractive to the "masses".
Unfortunately a seamless solution is out of our league.

The likes of Debian get Microsoft to "sign" a shim that contains a debian public key.
Then the grub2 binary can be ...

gyrog

@gyrog

Thank you for all your contributions :thumbup:

Is it possible for you to re-upload the Fossapup64_95+ie.zip?

The original file is not shown in your directory.

TIA
Sorry, no, I've just done a bit of a clean-up of both my local disk, and my mediafire account, so I don't have a copy.
If ...

gyrog

Would this toolkit be useful?
https://forum.puppylinux.com/viewtopic.php?p=129164#p129164
Maybe;
The utilities used by the current scripts are:
efibootmgr
mokutil
openssl
sbsign
sign-file

"sbctl" maybe be able to replace some or all of these, it could be worth a look.
But if it does, the ...

Puppy Linux Discussion Forum

Search found 643 matches

Re: FrugalPup v44, very flexible Puppy frugal installer, supporting i18n

pm66sfs - a pupmode=66 that saves to a .sfs file

Re: ziprelease - release Puppy as a zip archive file for uefi

Re: mergelayers - merge sfs files and directories into sfs file

Re: NoblePup64 iso to download?

Re: "Secure Boot" for Puppy Linux

Re: NoblePup64 iso to download?

Re: FrugalPup v44, very flexible Puppy frugal installer, supporting i18n

Re: NoblePup64 iso to download?

Re: NoblePup64 iso to download?

Re: "Secure Boot" for Puppy Linux

Re: "Secure Boot" for Puppy Linux

Re: FrugalPup v43, very flexible Puppy frugal installer, supporting i18n

Re: "Secure Boot" for Puppy Linux

Re: "Secure Boot" for Puppy Linux

Re: FrugalPup v43, very flexible Puppy frugal installer, supporting i18n

Re: "Secure Boot" for Puppy Linux

Re: mergelayers - merge sfs files and directories into sfs file

Re: FrugalPup v42, very flexible Puppy frugal installer, supporting i18n

Re: mergelayers - merge sfs files and directories into sfs file

Re: "Secure Boot" for Puppy Linux

Re: FrugalPup v42, very flexible Puppy frugal installer, supporting i18n

Re: grub2 version 2.06

Re: "Secure Boot" for Puppy Linux

Re: FrugalPup v42, very flexible Puppy frugal installer, supporting i18n

Re: "Secure Boot" for Puppy Linux

Re: "Secure Boot" for Puppy Linux - updated

Re: "Secure Boot" for Puppy Linux

Re: ziprelease - release Puppy as a zip archive file for uefi

Re: "Secure Boot" for Puppy Linux