# Which Debian suite/release do you want to use?
# Supported values are: stable, testing, unstable (or their corresponding release
-# names like "stretch").
+# names like "bookworm").
# Unless it is set it defaults to "testing".
# SUITE="unstable"
# Which Debian suite and which mirror do you want to use for debootstrapping?
# Usage: "<suite> <mirror>"
-# FAI_DEBOOTSTRAP="stretch http://ftp.debian.org/debian"
+# FAI_DEBOOTSTRAP="bookworm http://ftp.debian.org/debian"
# Do you want to use a local mirror (like NFS)?
# If so specify the directory where debian/ is available:
# ... and then set up an according class file in
# ${GRML_FAI_CONFIG}/config/files/etc/apt/sources.list.d/
# containing something like:
-# deb file:///media/mirror/debian sid main contrib non-free
+# deb file:///media/mirror/debian sid main contrib non-free-firmware non-free
# Version number of ISO:
# VERSION="0.0-1"
# boot the CD using normal el torito mode or copy it to USB device
# *without* having to run grml2usb (like: 'dd if=grml.iso of=/dev/sdX')
# - working both with the same ISO
+# Note that the manifold method is currently not be compatible with UEFI
+# setups.
# HYBRID_METHOD='disable' # do not create a hybrid ISO
-# HYBRID_METHOD='isohybrid' # use isohybrid from SYSLINUX
+# HYBRID_METHOD='isohybrid' # use isohybrid from SYSLINUX (default)
# HYBRID_METHOD='grub2' # use manifold with GRUB 2
-# HYBRID_METHOD='manifold' # use manifold with ISOLINUX (default)
-
-# By default Secure Boot is enabled using the approach from Ubuntu.
-# Currently only the Ubuntu approach is supported, which is restricted
-# to loading Linux kernels and using a minimal version of GRUB.
-# If unset defaults to "ubuntu"
-# SECURE_BOOT='disable' # do not enable Secure Boot
-# SECURE_BOOT="ubuntu" # use approach from Ubuntu
+# HYBRID_METHOD='manifold' # use manifold with ISOLINUX
+
+# Secure Boot method that should be used (amd64 only).
+# If unset defaults to "disabled" (which means no Secure Boot will be present)
+# The following approaches are supported:
+# debian: use the Debian GRUB version which requires a signed kernel,
+# this is the recommended way to use Secure Boot with Grml
+# ubuntu: use an older Ubuntu GRUB version which doesn't require a signed kernel,
+# though has a limited feature set only and requires customized GRUB
+# templates (the files shipped templates/boot/grub/ don't work as such)
+# SECURE_BOOT='disable' # do not enable Secure Boot (default)
+# SECURE_BOOT='debian' # use approach from Debian
+# SECURE_BOOT='ubuntu' # use approach from Ubuntu
# Binary that should be used for creating the squashfs file.
# Defaults to the executable matching the kernel version, falls back to mksquashfs.
# SQUASHFS_BINARY='mksquashfs'
# Options that should be used by mksquashfs during build process.
-# Defaults to '-b 256k' and the according LZMA/XZ option.
-# SQUASHFS_OPTIONS='-b 256k'
+# Defaults to '-b 1m' and the according LZMA/XZ option.
+# SQUASHFS_OPTIONS='-b 1m'
# exclude files from compressed squashfs file using the
# the mksquashfs option -ef: