Home

TODO

• Simplify array expansions (fixed in Bash 4.4)
• Consider using pipes instead of temporary files
• Use getopts for argument parsing
• Avoid creating backup if the new image is the same as the current one
  • PE signature differs every time, trivial comparison with cmp does not work
• Support multiple initramfs per kernel?
  • Review initrd list vs sourcing mkinitcpio presets
• Consider supporting kernel-install(8)
  • What to do with the default 90-loaderentry.install? Fixed in newer systemd (exit code 77)
  • Use /etc/kernel/cmdline in this mode
  • The hook part can be moved to pacman-kernel-install-git or similar
  • What to do with image rebuild on microcode update?
• Move /etc/default/sbupdate to /etc/sbupdate.conf?
• Move default key directory to /etc
• Generalize initrd prepend mechanism
• Recognize DB.key and db.key automatically using extglob. Consider removing KEYFILE and CRTFILE options for less clutter.
• Add tests (how?)
  • QEMU + OVMF
• Add continuous integration
• Warn if running from hook and an unsigned extra file is found
• Investigate TPM to store the platform key securely
  • https://github.com/tpm2-software/tpm2-tss-engine
• Use GitHub Actions
• systemd-measure support
• systemd/systemd@6e50cf3