spec file for building RPM

[rohde-schwarz]

spec file for building RPM

[neusdan]

Hi,

I've only implemented the TPM features for GRUB2 in MBR/Legacy Mode. It's also possible to do all the TPM stuff like measurements, unsealing etc. in EFI-Mode, but thats a complete different API and would require a lot of work. From my side, it's not planned for the moment, but maybe someone contributes it in the future.

Obviously you are running TrustedGRUB2 in MBR-Mode, otherwise the TPM features should not work. So i don't know why your grub.cfg is in /boot/efi, it actually make not much sense, seems to be some misconfiguration.

I'm not using Red Hat and not familiar with those .spec files, but you can send a pull request and i will add it.

[momiji]

Hello, well I finally understood where EFI comes from.

When I installed RHEL7 on my VirtualBox (I know there is no TPM but TrustedGRUB2 does work, of course), it installs without EFI, as secure boot is disabled by default in the BIOS. But it is possible to change it, and I managed to re-install with EFI, just to play with it.

When I installed RHEL7 on my tset computer, it installs automatically with EFI, and chaging the secure boot option in the BIOS didn't change anything. I finally found that I need to change the boot order to disable the EFI boot devices. Then, RHEL7 installs without EFI, and everything worked like a charm (well not completely, i'll write another post).

When playing with both installs, I finally understood that in EFI mode, there are 2 boot partitions (sda1 and sda2 containing /boot/efi and /boot). On the contrary, in non-EFI mode, there is only 1 boot partition containing the /boot. My guess is that the RHEL CDROM contains a system that allows both boot, one in EFI mode, one without. As proof, the grub gui is not the same.

I'm not fluent in linux enough to rebuild the first boot partition as a non-EFI one, so my best option was to reinstall without EFI support at all.

Thanks a lot for your help! - this can be closed