Linux Security Summit

Petitboot is a kexec-based bootloader that (ab)uses Linux to boot Linux, and is used as part of OpenPOWER firmware. By leveraging the linux-integrity subsystem, minimal kernel modifications are needed to transform Petitboot into a trusted boot loader. This talk will provide an overview of Petitboot, describe trusted boot on OpenPOWER and the changes to the kernel required to make it a trusted bootloader. This work also lays a foundation for using Petitboot as a secure bootloader.