You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Installing-and-Configuring/BootOptions.md
+9-14Lines changed: 9 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,29 +25,24 @@ A user has the option to make persistent modifications to the non-Qubes boot
25
25
process by creating one or more of the following files:
26
26
27
27
| file | description |
28
+
| ---- | ---- |
28
29
| kexec_menu.txt | contains multiple options for parameters to the kexec command|
29
30
| kexec_hashes.txt | a sha256sum file from within the respective boot directory |
30
-
| kexec_iso_add.txt | a sh variable to override the standard ISO kernel argument
31
-
additions |
32
-
| kexec_iso_remove.txt | a sh variable to override the standard ISO kernel
33
-
argument removals |
34
-
| kexec_default.$N.txt | specifies the default kexec parameters corresponding to
35
-
the Nth menu option |
36
-
| kexec_default_hashes.txt | a sha256sum file for the default entry kexec file
37
-
parameters |
38
-
| kexec_rollback.txt | a sha256sum of the TPM counter contents in the tmp
39
-
directory |
40
-
| kexec_key_devices.txt | contains a list of "device uuid" combos for all LUKS
41
-
devices to unlock |
31
+
| kexec_iso_add.txt | a sh variable to override the standard ISO kernel argument additions |
32
+
| kexec_iso_remove.txt | a sh variable to override the standard ISO kernel argument removals |
33
+
| kexec_default.$N.txt | specifies the default kexec parameters corresponding to the Nth menu option |
34
+
| kexec_default_hashes.txt | a sha256sum file for the default entry kexec file parameters |
35
+
| kexec_rollback.txt | a sha256sum of the TPM counter contents in the tmp directory |
36
+
| kexec_key_devices.txt | contains a list of "device uuid" combos for all LUKS devices to unlock |
42
37
| kexec_key_lvm.txt | contains the name of an LVM group to activate on boot |
43
38
44
39
These can be placed in any of the following locations:
45
40
46
41
| location | description |
42
+
| ---- | ---- |
47
43
| /boot/ | used during internal HD boot |
48
44
| /media/ | used during standard USB boot |
49
-
| /media/kexec_iso/$ISO_FILENAME/ | used during USB boot from a particular ISO
50
-
file |
45
+
| /media/kexec_iso/$ISO_FILENAME/ | used during USB boot from a particular ISO file |
51
46
52
47
These files are only used if there is an appropriate signature for them in `kexec.sig` covering all `kexec*.txt` in that location. This can be generated from the user interface from the `Update checksums and sign all files` in /boot menu option, or manually from the recovery shell by running `kexec-sign-config -p /boot/`, etc. These files are only copied by `kexec-check-config` to `/tmp/kexec/` if there is a valid signature. From there the boot routines reference only the configs in `/tmp/kexec`.
0 commit comments