dedfe0364c
Specify `cms_verify=y` in SYSLINUX/PXELINUX configuration to use OpenSSL CMS based method for verifying the root file system image against the code signing certificates in the initramfs. `checksum` and `verify` are removed since they essentially serve the same purpose and performing all the checks just needlessly delays boot. Additionally, the removal of `verify` allows to build the ISO without gpg, i.e. without using `mkarchiso`'s `-g` and `-G` options. Fixes #200
33 lines
1.4 KiB
INI
33 lines
1.4 KiB
INI
LABEL arch64_nbd
|
|
TEXT HELP
|
|
Boot the Arch Linux install medium using NBD.
|
|
It allows you to install Arch Linux or perform system maintenance.
|
|
ENDTEXT
|
|
MENU LABEL Arch Linux install medium (x86_64, NBD)
|
|
LINUX ::/%INSTALL_DIR%/boot/x86_64/vmlinuz-linux
|
|
INITRD ::/%INSTALL_DIR%/boot/intel-ucode.img,::/%INSTALL_DIR%/boot/amd-ucode.img,::/%INSTALL_DIR%/boot/x86_64/initramfs-linux.img
|
|
APPEND archisobasedir=%INSTALL_DIR% archisolabel=%ARCHISO_LABEL% archiso_nbd_srv=${pxeserver} cms_verify=y
|
|
SYSAPPEND 3
|
|
|
|
LABEL arch64_nfs
|
|
TEXT HELP
|
|
Boot the Arch Linux live medium using NFS.
|
|
It allows you to install Arch Linux or perform system maintenance.
|
|
ENDTEXT
|
|
MENU LABEL Arch Linux install medium (x86_64, NFS)
|
|
LINUX ::/%INSTALL_DIR%/boot/x86_64/vmlinuz-linux
|
|
INITRD ::/%INSTALL_DIR%/boot/intel-ucode.img,::/%INSTALL_DIR%/boot/amd-ucode.img,::/%INSTALL_DIR%/boot/x86_64/initramfs-linux.img
|
|
APPEND archisobasedir=%INSTALL_DIR% archiso_nfs_srv=${pxeserver}:/run/archiso/bootmnt cms_verify=y
|
|
SYSAPPEND 3
|
|
|
|
LABEL arch64_http
|
|
TEXT HELP
|
|
Boot the Arch Linux live medium using HTTP.
|
|
It allows you to install Arch Linux or perform system maintenance.
|
|
ENDTEXT
|
|
MENU LABEL Arch Linux install medium (x86_64, HTTP)
|
|
LINUX ::/%INSTALL_DIR%/boot/x86_64/vmlinuz-linux
|
|
INITRD ::/%INSTALL_DIR%/boot/intel-ucode.img,::/%INSTALL_DIR%/boot/amd-ucode.img,::/%INSTALL_DIR%/boot/x86_64/initramfs-linux.img
|
|
APPEND archisobasedir=%INSTALL_DIR% archiso_http_srv=http://${pxeserver}/ cms_verify=y
|
|
SYSAPPEND 3
|