Loading a combined kernel, initramfs, and boot options as direct loadable efi stub

[tbk]

Hi,

now this was tough...

as I mentioned in my first post I created the kernel.efi as follows:

objcopy \
--add-section .osrel=/etc/os-release --change-section-vma .osrel=0x20000 \
--add-section .cmdline="cmdline.txt" --change-section-vma .cmdline=0x30000 \
--add-section .linux="vmlinuz-linux" --change-section-vma .linux=0x40000 \
--add-section .initrd="initramfs-linux.img" --change-section-vma .initrd=0x3000000 \
/usr/lib/systemd/boot/efi/linuxx64.efi.stub kernel.efi

for uefi secure boot I signed the kernel.efi with:

sbsign --key vendor.key --cert vendor.crt --output kernel.signed.efi kernel.efi

I mixed up this two files. So I loaded the kernel.signed.efi with ipxe and the kernel.efi direct from local storage.
Because I had uefi secure boot disabled kernel.signed.efi didn't executed with the correct cmdline but the local kernel.efi

Now if I enable uefi secure boot and load the kernel.signed.efi with ipxe the cmdline looks as it should.

so this is no ipxe problem ... but interesting that there is such a difference between loading a signed file.

Cheers and sorry for the noise