anatol/booster

'sbsign' complains about booster images: "Invalid DOS header magic"

Closed this issue · 2 comments

Securing the initramfs via

/usr/bin/sbsign --key /etc/refind.d/keys/refind_local.key --cert /etc/refind.d/keys/refind_local.crt --output /boot/booster-linux.img /boot/booster-linux.img

returns Invalid DOS header magic

You are not supposed to sign the initramfs, you should package it into a Unified Kernel Image. See https://wiki.archlinux.org/index.php/Systemd-boot#Preparing_a_unified_kernel_image

Did anybody tried using booster with secureboot successfully? If it works then it would be great to mention it in the documentation.