Kwenzeka ukuthi ngihumushe le ndatshana ayibhalile UJames Bottomley, umeluleki wezobuchwepheshe we Linux Foundation, oqale ukuhlanganisa pre-bootloader ukuze ukwazi ukuqala i-Linux.
Njengoba ngichazile kokuthunyelwe kwami kwangaphambilini, sinekhodi ye-Linux Foundation pre-bootloader esendaweni. Kodwa-ke, bekukhona ifayela le- ukubambezeleka ngenkathi sikwazi ukufinyelela ohlelweni lokusayina lweMicrosoft.
Into yokuqala okufanele uyenze ukhokhe u- $ 99 kuVerisign (manje eyiSymantec) futhi unokhiye oqinisekiswe yiVerisign. Sikwenzele iLinux Foundation, futhi konke abafuna ukukwenza ukubiza indlunkulu ukuze iqinisekise. Ukhiye ubuyisa i-URL efakwe esipheqululini sakho, kepha amathuluzi ajwayelekile we-Linux SSL angasetshenziswa ukuwakhipha futhi wakhe isitifiketi esijwayelekile se-PEM nokhiye. Akuhlangene ngalutho nokusayinwa kwe-UEFI, kepha kusetshenziselwa ukuqinisekisa uhlelo sysdev IMicrosoft ukuthi uyilokho othi unguye. Ngaphambi kokuthi wenze i-akhawunti ye-sysdev, kufanele uyihlole ukusayina okufanele ukwenze abakunikeza bese bekulayisha. Benza izidingo eziqinile zokuthi uyisayine kungxenyekazi ethile ye-Windows, kepha sbsign okungenani kuyasebenza futhi ibhingo i-akhawunti yethu yadalwa.
Lapho nje i-akhawunti isenziwe, awusakwazi ukulayisha okubili kwe-UEFI ngokusayina ngaphandle kokuqala sayina inkontileka yephepha. Izivumelwano zinzima kakhulu, kufaka phakathi amalayisense amaningi akhishiwe (kufaka phakathi wonke ama-GPL wabashayeli, kepha hhayi ama-bootloaders). Okukhathaza kakhulu ukuthi izivumelwano zibonakala zifika ngale kwezinto ze-UEFI osayina. Abameli beLinux Foundation baphethe ngokuthi ayinabungozi kangako ku-LF ngoba asiyithengisi imikhiqizo, kodwa inganyanyisa ezinye izinkampani. NgokukaMathewu Garrett, iMicrosoft izimisele ukuxoxisana ngamadili akhethekile nokusabalalisa ukunciphisa ezinye zalezo zinkinga.
Lapho nje izivumelwano sezisayiniwe, okwangempela ubumnandi bezobuchwepheshe. Awukwazi ukuvele ulayishe i-UEFI kanambambili bese uyisayina. Okokuqala kufanele yigoqele kufayela le-.cab. Ngenhlanhla, kukhona iphrojekthi yomthombo ovulekile ongadala amafayela ekhabethe abizwa nge-lcab. Ngemuva kwalokho kufanele sayina ifayela le-.cab ngokhiye we-Verisign. Futhi, kunenye iphrojekthi yomthombo ovulekile engenza lokho: osslsigncode. Noma ngubani odinga lawo mathuluzi, ayatholakala endaweni yami evulekileSuse Build Service UEFI. Inkinga yokugcina ukuthi ukulayishwa kwefayela kudinga ukukhanya kwesiliva. Ngeshwa, ukukhanya kwenyanga kubonakala kungasebenzi futhi nokubuka kuqala inguqulo 4, ibhokisi lokulayisha alinalutho, ngakho-ke sekuyisikhathi sokusebenzisa amawindi 7 ngaphansi kwe-kvm (umshini we-kernel-based virtual). Uma ufika kuleyo ngxenye, kufanele futhi uqinisekise ukuthi kanambambili “kuzosayinwa, akufanele ilayisensi ngaphansi kwe-GPLv3 noma amalayisense womthombo ovulekile ofanayo”. Ngicabanga ukuthi kungenxa yokwesaba ukudalulwa okubalulekile kepha akucaci nakancane (okufanayo "namalayisense womthombo ovulekile ofanayo").
Lapho ukulayishwa sekuqediwe, ifayili lekhabhinethi limisa ngezigaba eziyisikhombisa. Ngeshwa, ukukhuphuka kokuqala kokuhlolwa kwahlala ikhiyiwe esigabeni 6 (isiginesha yamafayela). Ngemuva kwezinsuku eziyi-6 ngathumela i-imeyili yokusekela kwaMicrosoft ngibuza ukuthi kwenzekani. Impendulo: “Ikhodi yephutha eliphonswe inqubo yokusayina ukuthi ifayela lakho akulona uhlelo lokusebenza oluvumelekile lwe-Win32. Ingabe uhlelo olusebenzayo lwe-Win32? ”. Impendulo: kusobala ukuthi cha, kuyinto kanambambili evumelekile engama-64 ye-UEFI. Kwakungasekho zimpendulo...
Ngazama futhi. Ngalesi sikhathi ngithole i-imeyili yokulanda yefayela elisayiniwe futhi ibhodi lisho lokho okusayiniwe kwehlulekile. Ngiyilandile futhi ngayiqinisekisa. I-kanambambili isebenza kungxenyekazi ephephile futhi isayindwe ngokhiye
subject = / C = US / ST = Washington / L = Redmond / O = Microsoft Corporation / OU = MOPR / CN = Microsoft Windows UEFI Driver Publisher
okhipha = / C = US / ST = Washington / L = Redmond / O = Microsoft Corporation / CN = Microsoft Corporation UEFI CA 2011Ngibuze ukuxhaswa ukuthi kungani inqubo ikhombisa ukwehluleka kepha ngine-download evumelekile futhi, ngemuva kokuqubuka kwama-imeyili, baphendula bathi “ungasebenzisi lelo fayela isayinwe ngephutha. Ngizakubuyela kuwe. " Angiqiniseki ukuthi yini inkinga, kepha uma ubheka isihloko sokhiye wokusayina, akukho lutho kusihluthulelo esingakhombisa ku-Linux Foundation, ngakho-ke ngisola inkinga ukuthi i-kanambambili isayindwe ngokhiye ojwayelekile weMicrosoft kunokhiye othize (futhi ongasuswa) oboshwe ku-Linux Foundation.
Noma kunjalo, lesi yisimo: Sizoqhubeka nokulinda iMicrosoft ukuthi inikeze iLinux Foundation i-pre-bootloader esayiniwe neqinisekisiwe. Uma lokho kwenzeka, izolayishwa kusayithi le-Linux Foundation ukuze isetshenziswe yibo bonke.
Umthombo: http://blog.hansenpartnership.com/adventures-in-microsoft-uefi-signing/
Dala iziphetho zakho, kepha lokhu kuzothatha isikhathi.