rhboot / rhboot/shim

Malformed binary after Attribute Certificate Table

Open
#760 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
1.1k
Forks
348
PR merge metrics
No merged PRs in 30d

Description

I'm trying to boot Ubuntu from iPXE using Ubuntu's signed shim. Here's what I'm trying to boot with:
kernel http://xxx.xxx.xxx.xxx/shimx64.signed.efi kernels/22.04.5/vmlinuz initrd=kernels/22.04.5/initrd insert cmdline here

Here's what I get when I run it:

http://xxx.xxx.xxx.xxx/shimx64.signed.efi... ok
Fetching Netboot Image http://xxx.xxx.xxx.xxx/kernels/22.04.5/vmlinuz
Malformed binary after Attribute Certificate Table
datasize: 16777216 SumOfBytesHashed: 11702784 SecDir->Size: 1928
hashsize: 5072504 SecDir->VirtualAddress: 0x00B29200
Failed to load image: Invalid Parameter
start_image() returned Invalid Parameter, falling back to default loader

Then it tries to load http://xxx.xxx.xxx.xxx/grubx64.efi which doesn't exist.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the shown iPXE kernel command and inspect the start_image() failure path around "Malformed binary after Attribute Certificate Table." Compare the reported datasize, hashsize, and security-directory values; done means the signed shim loads the Ubuntu kernel without Invalid Parameter or falling back to grubx64.efi.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.