GRUB Bootloader Picks Up A Verifier Framework For Secure Boot, TPM, PGP Verification

Landing in the GRUB boot-loader minutes ago is a new "verifiers" framework providing core verification functionality for the likes of UEFI Secure Boot, Trusted Platform Modules, and PGP.

The GRUB verifiers framework can be used by modules whereby the boot-loader needs to handle some verification steps at boot-time. The obvious focus on this verification framework is for security mechanisms like Secure Boot or TPM support.

This framework allows also verifying the kernel image to built, modules command lines, etc. The initial user of this framework is the PGP module for checking the GRUB image against a GnuPG signature. There is also a new EFI shim lock verifier module that was added that provides verification of kernels if UEFI Secure Boot is enabled.

This work was just merged into GRUB Git ahead of the eventual GRUB 2.04 release.