Skip to content

Conversation

frezbo
Copy link
Member

@frezbo frezbo commented Oct 10, 2025

Support disabling kernel module signature verification. Note that this does not work when SecureBoot is enabled.

Fixes: #11989

@github-project-automation github-project-automation bot moved this to To Do in Planning Oct 10, 2025
@talos-bot talos-bot moved this from To Do to In Review in Planning Oct 10, 2025
Copy link
Member

@smira smira left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should put a note to hack/release.toml on this

@github-project-automation github-project-automation bot moved this from In Review to Approved in Planning Oct 13, 2025
@smira
Copy link
Member

smira commented Oct 13, 2025

Oh, and more important thing: let's add current status to SecurityState and assert that it is enforced in all our tests.

@frezbo
Copy link
Member Author

frezbo commented Oct 14, 2025

Oh, and more important thing: let's add current status to SecurityState and assert that it is enforced in all our tests.

yes, I also need to update some docs in developing talos

@frezbo frezbo force-pushed the feat/optional-module-sig-verify branch 2 times, most recently from e40c018 to 7694059 Compare October 16, 2025 14:12
Support disabling kernel module signature verification.
Note that this does not work when SecureBoot is enabled.

Fixes: siderolabs#11989

Signed-off-by: Noel Georgi <[email protected]>
@frezbo frezbo force-pushed the feat/optional-module-sig-verify branch from 7694059 to ced57b0 Compare October 16, 2025 14:48
@frezbo
Copy link
Member Author

frezbo commented Oct 16, 2025

/m

@talos-bot talos-bot merged commit ced57b0 into siderolabs:main Oct 16, 2025
59 checks passed
@github-project-automation github-project-automation bot moved this from Approved to Done in Planning Oct 16, 2025
@frezbo frezbo deleted the feat/optional-module-sig-verify branch October 16, 2025 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

Set module.sig_enforce in talos images

3 participants