X-Git-Url: http://git.grml.org/?p=grml-live.git;a=blobdiff_plain;f=etc%2Fgrml%2Fgrml-live.conf;h=06e1e6c5f7fc7db46964f8472217ac6b468629f0;hp=e30d4b7ba3755fc5e21e76784d3699be4f80eaf0;hb=518eb395d8652ccf260e4fe6fc15af7946fc7c49;hpb=7beda7dae5063c45ab57c061bcfb27e13fd704ea

diff --git a/etc/grml/grml-live.conf b/etc/grml/grml-live.conf
index e30d4b7..06e1e6c 100644
--- a/etc/grml/grml-live.conf
+++ b/etc/grml/grml-live.conf
@@ -32,7 +32,7 @@
 # PRESERVE_LOGFILE='1'
 
 # If package grml-live-db is installed the package selection and grml-live.log
-# are being logged to to a sqlite database.Defaults to /var/log/grml-live.db
+# are being logged to a sqlite database.Defaults to /var/log/grml-live.db
 # DPKG_DATABASE=/var/log/grml-live.db
 
 # Use your own database wrapper script for grml-live-db:
@@ -49,7 +49,7 @@
 
 # Which Debian suite/release do you want to use?
 # Supported values are: stable, testing, unstable (or their corresponding release
-# names like "jessie").
+# names like "stretch").
 # Unless it is set it defaults to "testing".
 # SUITE="unstable"
 
@@ -66,7 +66,7 @@
 
 # Which Debian suite and which mirror do you want to use for debootstrapping?
 # Usage: "<suite> <mirror>"
-# FAI_DEBOOTSTRAP="jessie http://ftp.debian.org/debian"
+# FAI_DEBOOTSTRAP="stretch http://ftp.debian.org/debian"
 
 # Do you want to use a local mirror (like NFS)?
 # If so specify the directory where debian/ is available:
@@ -157,6 +157,18 @@
 # HYBRID_METHOD='grub2'     # use manifold with GRUB 2
 # HYBRID_METHOD='manifold'  # use manifold with ISOLINUX (default)
 
+# Secure Boot method that should be used (amd64 only).
+# If unset defaults to "disabled" (which means no Secure Boot will be present)
+# The following approaches are supported:
+# debian: use the Debian GRUB version which requires a signed kernel,
+#         this is the recommended way to use Secure Boot with Grml
+# ubuntu: use an older Ubuntu GRUB version which doesn't require a signed kernel,
+#         though has a limited feature set only and requires customized GRUB
+#         templates (the files shipped templates/boot/grub/ don't work as such)
+# SECURE_BOOT='disable'         # do not enable Secure Boot (default)
+# SECURE_BOOT='debian'          # use approach from Debian
+# SECURE_BOOT='ubuntu'          # use approach from Ubuntu
+
 # Binary that should be used for creating the squashfs file.
 # Defaults to the executable matching the kernel version, falls back to mksquashfs.
 # SQUASHFS_BINARY='mksquashfs'