Secure booting linux / additional certificates

[freaky]

To answer your shim sources question: https://github.com/rhinstaller/shim

Just tested with passing the kernel as an initrd like you suggested, but it doesn't work. See iPXE downloading all 3 files, but then errors show up of an image not being found. There's 2 HTTP requests for grubx64.efi going out at that point. The errors talk about a TFTP image though. shim.efi seems to be hardcoded to load grubx64.efi unfortunately.

Used iPXE config:

:gototagname
initrd http://10.234.234.51/xxxx/vmlinuz0
initrd http://10.234.234.51/xxxx/initrd0.img
kernel http://10.234.234.51/shim.efi vmlinuz0 rootflags=loop initrd=initrd0.img root=live:/somefilename.iso rootfstype=auto ro rd.live.image quiet rd.live.ram quiet rhgb rhgb rd.luks=0 rd.md=0 rd.dm=0
boot

Onscreen output:

http://10.234.234.51/xxxx/vmlinuz0... ok
http://10.234.234.51/xxxx/initrd0.img... ok
http://10.234.234.51/shim.efi... ok
Fetching Netboot Image
Unable to fetch TFTP image: Not Found
Fetching Netboot Image
Unable to fetch TFTP image: Not Found
Could not boot: Error 0x7f04828e (http://ipxe.org/7f04828e)
Could not boot image: Error 0x7f0f828e (http://ipxe.org/7f04828e)
No more network devices

Press Ctrl-B for the iPXE command line...